过去几周,我发现我的 OpenDKIM 不再拒绝没有 dkim 签名、签名错误等的来信。签名发送正常,并且根据提供的邮件头验证也是如此。这是在更新服务器的 OS Archlinux(现在的内核是 v.5.9.6-arch1-1)后发生的。一些配置:
打开:
AlwaysAddARHeader yes
AuthservID OpenDKIM-Main
LogWhy yes
Mode sv
On-NoSignature reject
On-BadSignature reject
On-SignatureError reject
On-KeyNotFound reject
Socket inet6:8891@[::1]
UMask 002
后缀:
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:[::1]:8891, inet:[::1]:8893 #last one is OpenDMARC
non_smtpd_milters = $smtpd_milters
从已验证的邮件中,有关 dkim 的标头如下:
Authentication-Results: OpenDKIM-Main; dkim=pass (1024-bit key) header.d=stackoverflow.email [email protected] header.b=Lq1gxzV+
来自未经验证的,必须被拒绝:
Authentication-Results: OpenDKIM-Main; dkim=none
如何解决这个问题?