Re: howto sign all mails

From: Murray S. Kucherawy <>
Date: Tue, 29 Jun 2010 14:48:10 -0700 (PDT)

On Tue, 29 Jun 2010, Andreas Schulze wrote:
> again I'm playing with opendkim. Last days I tried to sign all mail
> which passes my MTA no matter which sending domain is used.
> I only like to 'label' the messages, that they had passed my MTA.
> so I wrote this opendkim.conf:
> Domain
> Selector 2010
> Keyfile /opt/opendkim/keys/
> but this signs only, if the sender is
> I does *not* sign other mails although they passed also (authenticated) via
> this postfix smtp-server:

Right, you've told it to sign only for, so that's what
it's doing.

You have a few ways to do what you're asking. See the DATA SETS section
of the opendkim(8) man page for the full set of options. Some quick

(1) List all of the domains you want to sign explicitly in the
configuration file, as a comma separated list, e.g.:

         Domain domain1,domain2,domain3,...

(2) Make a file that contains them all:

         Domain /etc/mail/opendkim/signing-domains

     ...and in /etc/mail/opendkim/signing-domains:


(3) Make a file that contains a regular expression that matches any

         Domain refile:/etc/mail/opendkim/signing-domains

     ...and in /etc/mail/opendkim/signing-domains:


(4) (Prior to v1.2.0 and starting again with v2.1.2, out next week):

         Domain *

Let me know if you need more help.

Received on Tue Jun 29 2010 - 21:48:36 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:19:47 PST