To install Open DKIM on Postfix and sign outgoing emails on CentOS 7, follow these steps:

yum install opendkim opendkim-tools

AutoRestart Yes

AutoRestartRate 10/1h

UMask 002

Syslog yes

SyslogSuccess Yes

LogWhy Yes

Canonicalization relaxed/simple

ExternalIgnoreList refile:/etc/opendkim/TrustedHosts

InternalHosts refile:/etc/opendkim/TrustedHosts

KeyTable refile:/etc/opendkim/KeyTable

SigningTable refile:/etc/opendkim/SigningTable

Mode sv

PidFile /var/run/opendkim/opendkim.pid

SignatureAlgorithm rsa-sha256

UserID opendkim:opendkim

Socket inet:8891@localhost

touch /etc/opendkim/TrustedHosts

touch /etc/opendkim/KeyTable

touch /etc/opendkim/SigningTable

127.0.0.1

localhost

opendkim-genkey -b 2048 -d example.com -D /etc/opendkim/keys/ -s mail -v

This will generate a private key (mail.private) and a public key (mail.txt) in the /etc/opendkim/keys/ directory.

Add the following line to your /etc/opendkim/KeyTable file, replacing example.com with your own domain and /etc/opendkim/keys/mail.private with the path to your private key file:

mail._domainkey.example.com example.com:/etc/opendkim/keys/mail.private

Add the following line to your /etc/opendkim/SigningTable file, replacing example.com with your own domain:

*@example.com mail._domainkey.example.com

Add the following lines to your /etc/postfix/main.cf file:

milter_default_action = accept

milter_protocol = 2

smtpd_milters = inet:localhost:8891

non_smtpd_milters = inet:localhost:8891

systemctl start opendkim

systemctl enable opendkim

system

Stay One Step Ahead of Phishing Attacks