找到 DKIM DNS 记录，但电子邮件表明未找到签名

Question

当我扫描我的 DNS 记录时，找到了我的 DKIM 记录，但是当我发送电子邮件时，没有找到 DKIM 签名。以下是我认为有助于解决此问题所需的初步信息。任何帮助将不胜感激。

注册商\名称服务器：Godaddy 托管：数字海洋 OS: Ubuntu 14.04

DNS 记录（DKIM 测试网站找到域密钥并表明没有错误）：

TXT default._domainkey  v=DKIM1; g=*; k=rsa; p=domainkeygoeshere    600 seconds

邮箱：

echo "just a new test" | mail -s "email contents" to@destination.com -aFrom:from@mydomain.com

回复：

DKIM Information:
DKIM Signature
This message does not contain a DKIM Signature
dkim=none header.d=mydomain.com; x-hmca=none header.id=from@mydomain.com

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         permerror
SpamAssassin check: ham


"permerror"
  The message could not be verified due to some error that
  is unrecoverable, such as a required header field being
  absent. A later attempt is unlikely to produce a final result.

DKIM 安装（遵循本教程）：

 https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-dkim-with-postfix-on-debian-wheezy

文件：/etc/opendkim/TrustedHosts

127.0.0.1
localhost
192.168.0.1/24
mydomain.com
12.12.12.12

*.mydomain.com

#*.example.net
#*.example.org

文件：/etc/opendkim/KeyTable

default._domainkey.mydomain.com     mydomain.com:mail:/etc/opendkim/keys/mydomain.com/mail.private

#mail._domainkey.example.net    example.net:mail:/etc/opendkim/keys/example.net/mail.private
#mail._domainkey.example.org   example.org:mail:/etc/opendkim/keys/example.org/mail.private

文件：/etc/opendkim/SigningTable

*@mydomain.com default._domainkey.mydomain.com

#*@example.net mail._domainkey.example.net
#*@example.org mail._domainkey.example.org

root@mydomain:/etc/opendkim/keys/mydomain.com# ls

mail.private  mail.txt

Answer 1

很难使用该信息进行调试，但请尝试从您的配置文件中删除 _domainkey。

我的配置：

DNS-Record:

TXT   mail._domainkey   v=DKIM1; h=sha256; k=rsa; p=*key*   600

/etc/opendkim.conf:

OversignHeaders         From
Canonicalization        relaxed/relaxed
ExternalIgnoreList      refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrustedHosts
KeyTable                refile:/etc/opendkim/KeyTable
LogWhy                  Yes
MinimumKeyBits          1024
Mode                    sv
PidFile                 /var/run/opendkim/opendkim.pid
SigningTable            refile:/etc/opendkim/SigningTable
Socket                  inet:8891@localhost
Syslog                  Yes
SyslogSuccess           Yes
TemporaryDirectory      /var/tmp
UMask                   022
UserID                  opendkim:opendkim

/etc/opendkim/KeyTable:

domain.tld domain.tld:mail:/etc/opendkim/mail

/etc/opendkim/SigningTable:

*@domain.tld domain.tld

/etc/opendkim/TrustedHosts:

127.0.0.1

/etc/postfix/main.cf:

smtpd_milters           = inet:127.0.0.1:8891
non_smtpd_milters       = $smtpd_milters
milter_default_action   = accept

同时使用 ls -la 检查 /etc/opendkim/ 目录的所有者和权限，或者再次设置它们：

chown -Rv opendkim:opendkim /etc/opendkim
chmod go-rwx /etc/opendkim/*

配置后是否重启了postfix和opendkim？

service opendkim restart
service postfix restart

我希望这对您有所帮助，您可以找到问题所在。

找到 DKIM DNS 记录，但电子邮件表明未找到签名

DKIM DNS Record found but emails indicate no signature found

domainkeys

dkim

digital-ocean

ubuntu-14.04