配置Postfix以拒绝具有无效DKIM签名的邮件


3

我已经配置了Postfix以使用OpenDKIM签名邮件。(我遵循了本教程。)

现在,我想将Postfix配置为拒绝已配置DKIM的域的邮件,并且该邮件缺少适当的签名(例如,当我自己的域用作假发件人地址时)。

在opendkim.conf中,我启用了验证(Mode sv),在Postfic main.conf中,我具有

milter_protocol = 2
milter_default_action = accept
smtpd_milters = inet:localhost:12301

我发现的是mail.log

Feb 24 19:25:10 myhost postfix/cleanup[20016]: 113623DC1119: message-id=<20140623093302970001.H132BE30.southlands@example.com>
Feb 24 19:25:10 myhost opendkim[1355]: 113623DC1119: [78.90.96.5] [78.90.96.5] not internal
Feb 24 19:25:10 myhost opendkim[1355]: 113623DC1119: not authenticated
Feb 24 19:25:10 myhost opendkim[1355]: 113623DC1119: no signature data
Feb 24 19:25:10 myhost postfix/qmgr[1791]: 113623DC1119: from=<southlands515@example.dom>, size=1981, nrcpt=1 (queue active)

因此,OpenDKIM似乎已经注意到该邮件无效,但是并没有被拒绝。

Answers:


0

我遵循

milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:localhost:12301
non_smtpd_milters = inet:localhost:12301

1
除了较旧的协议版本,我都一样。您是否真的看到由于Postfix无效的DKIM签名而导致邮件被拒绝了?我不。
Gene Vincent
By using our site, you acknowledge that you have read and understand our Cookie Policy and Privacy Policy.
Licensed under cc by-sa 3.0 with attribution required.