2008/9/13 Ben Crowell <[EMAIL PROTECTED]>: > I'm attempting to implement domainkeys using Jason Long's > dkfilter. (If I'd been more knowledgeable, I'd have done > DKIM instead, but I think my current problem may be unrelated > to domainkeys versus DKIM.)
As far as sysadmins care, dkim==domainkeys. </my experience> dkfilter supports both. At once. (from the docs, "DKIMproxy can now add multiple signatures in one pass. This lets you, for example, generate a DomainKey-Signature *and* a DKIM-Signature on your outgoing messages") > I've been trying to follow these tutorials: > http://www.howtoforge.com/postfix_dkfilter_domain_keys_implementation > http://fluzo.org/blog/post/tutorial-domainkeys-dkim-postfix#3980 > http://wiki.railsmachine.com/UsingDkimEmailAuthentication For what it's worth, I followed the canonical guide on dkimproxy.sourceforge.net and got it working. Disclaimer: the customer that wanted it doesn't care about inwards filtering, just signing for their outbound mail campaigns. > However, my outgoing mail isn't getting DomainKey-Signature > headers added to it, and I can't figure out what's wrong. I have Assuming the mail *is* actually coming through, your dkfilter+postfix setup is probably right (my conf-file-reading fu is pretty weak). One thing our customer discovered when we set it up was that outgoing mail would get a dkim signature but stubbornly refused to get domainkey'd. I haven't had a look at dkfilter's code, but I believe signing is done based on the envelope-from domain, if memory serves me correctly. We had an odd issue due to the envelope-from not matching the From/Reply-To header in the mail itself. This was solved with the addition of a Sender: header matching the envelope-from. Once added, the mail got both dkim and domainkeys headers as expected. To my mind, you might as well enable the generation of both headers, it can't hurt (unless your system is heavily loaded).
