URL: https://linuxfr.org/forums/linux-debian-ubuntu/posts/postfix-et-rspamd-signature-mail-dkim Title: Postfix et rspamd : Signature mail DKIM Authors: electro575 Date: 2025年06月18日T08:34:09+02:00 License: CC By-SA Tags: Score: 1 Bonjour à tous, J'avais déjà mis en place une signature DKIM auparavant mais je dois la renouveler. J'ai effectué ceci pour la mise en place et mis ce qu'il faut en zone DNS mais rien n'y fait côté mailtester ça ne passe pas ! Création de la clef publique et privée. ``` mkdir /var/lib/rspamd/dkim chown _rspamd: /var/lib/rspamd/dkim rspamadm dkim_keygen -d domain.org -s 2025061701 -b 2048 -k /var/lib/rspamd/dkim/domain.org.2025061701.key> /var/lib/rspamd/dkim/domain.org.2025061701.txt chown _rspamd: /var/lib/rspamd/dkim/* chmod u=r,go= /var/lib/rspamd/dkim/* ``` Mise en place de la prise en compte sous rspamd. ``` nano /etc/rspamd/local.d/dkim_signing.conf path = "/var/lib/rspamd/dkim/$domain.$selector.key"; selector_map = "/etc/rspamd/dkim_selectors.map"; ### Active la signature DKIM pour les alias allow_username_mismatch = true; # pour gérer les signatures par sous-domaine (détails plus bas) use_esld = false; ``` ``` nano /etc/rspamd/dkim_selectors.map domain.org 2025061701 ``` Voici les logs de rspamd au démarrage, je ne sais pas si rspamd a bien pris en compte la clef. ``` (main) ; cfg; dkim_module_config: init internal dkim module (main) ; lua; lua_maps.lua:278: reuse url for complex map definition chqbixcj: DKIM signing networks (main) ; map; rspamd_map_add: added map /etc/rspamd/dkim_selectors.map (main) ; cfg; rspamd_init_lua_filters: init lua module dkim_signing from /usr/share/rspamd/plugins/dkim_signing.lua; digest: 5801ba3744 (main) ; lua; rbl.lua:1203: added rbl rule DWL_DNSWL: checks: alive,user,local,dkim (main) ; lua; rbl.lua:1203: added rbl rule RSPAMD_URIBL: checks: alive,dkim,emails,urls (main) ; lua; rbl.lua:1203: added rbl rule SEM_URIBL_UNKNOWN: checks: alive,dkim,emails,urls (main) ; lua; rbl.lua:1203: added rbl rule SEM_URIBL_FRESH15_UNKNOWN: checks: alive,dkim,emails,urls (main) ; lua; rbl.lua:1203: added rbl rule URIBL_MULTI: checks: alive,helo,dkim,emails,replyto,urls,rdns,selector (main) ; lua; rbl.lua:1203: added rbl rule DBL: checks: alive,helo,dkim,emails,replyto,urls,rdns,selector (main) ; lua; rbl.lua:1203: added rbl rule SURBL_MULTI: checks: alive,helo,dkim,emails,replyto,urls,rdns,selector (main) ; cfg; rspamd_map_parse_backend: map '/etc/rspamd/local.d/maps.d/spf_dkim_whitelist.inc.local' is not found, but it can be loaded automatically later (main) ; cfg; rspamd_map_parse_backend: map '/var/lib/rspamd/spf_dkim_whitelist.inc.local' is not found, but it can be loaded automatically later (main) ; cfg; rspamd_map_parse_backend: map '/etc/rspamd/local.d/maps.d/dkim_whitelist.inc.local' is not found, but it can be loaded automatically later (main) ; cfg; rspamd_map_parse_backend: map '/var/lib/rspamd/dkim_whitelist.inc.local' is not found, but it can be loaded automatically later (main) ; cfg; rspamd_map_parse_backend: map '/etc/rspamd/maps.d/dkim_whitelist.inc' is not found, but it can be loaded automatically later (main) <8m79ek>; map; read_map_file: /etc/rspamd/local.d/maps.d/dkim_whitelist.inc.local: map file is not found; it will be read automatically if created (main) <8m79ek>; map; read_map_file: /var/lib/rspamd/dkim_whitelist.inc.local: map file is not found; it will be read automatically if created (main) ; map; rspamd_map_read_http_cached_file: read cached data for https://maps.rspamd.com/rspamd/spf_dkim_whitelist.inc.zst from /var/lib/rspamd/2368c73b937d98513ed72c4b04f4247bda43fdb5.map, 2860 bytes; next check at: 2025年06月18日 09:14:32; last modified on: 2025年06月09日 18:44:07; etag: (NULL) (main) ; map; read_map_file: /etc/rspamd/local.d/maps.d/spf_dkim_whitelist.inc.local: map file is not found; it will be read automatically if created (main) ; map; read_map_file: /var/lib/rspamd/spf_dkim_whitelist.inc.local: map file is not found; it will be read automatically if created (main) ; map; rspamd_kv_list_fin: read hash of 236 elements from https://maps.rspamd.com/rspamd/spf_dkim_whitelist.inc.zst (main) ; map; rspamd_kv_list_fin: read hash of 1 elements from /etc/rspamd/dkim_selectors.map ``` Si vous avez des idées, je suis preneur.