DNS/SPF: Unterschied zwischen den Versionen

Version vom 8. August 2026, 08:51 Uhr

DNS/SPF - SPF + DK + DKIM with Postfix

Beschreibung

SPF, DK und DKIM mit Postfix

einrichtet
testen

Postfix installieren

apt install postfix

SPF

Sender Policy Framework

DomainKeys

DKIM

Test

There is an easy way to test if everything is correct

Create an email account if you haven’t already
Send a test mail to the following recipient
check-auth@verifier.port25.com

Antwort

=======================================
Summary of Results
=======================================
SPF check: pass
DomainKeys check: pass
DKIM check: pass
Sender-ID check: pass
SpamAssassin check: ham* AAAA3QcKCQwA@appmaildev.com

========================================
SPF result: Pass
========================================
Domain: myserverplace.de
IP: 144.76.163.46

SPF Record: myserverplace.de
IN TXT = "v=spf1 +a +mx 144.76.163.46 ?all"

========================================
DomainKey result: pass
========================================
Signed by: admin@myserverplace.de

PublicKey: default._domainkey.myserverplace.de
IN TXT = "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAruBNqdsSCKBLwMrFNNKH8z0e7zmlAic7iRoJsDDJK3IlnW8j6G/T6a93m+jqYc6R38MBAZbeSv2LQJ0SepJEsr4Iqk41WFXPBKnyXReO1RXPW5/YnRe6dpJMEqsmPpl2TjInY7ve/6VCiVDOHn9RRrdB+x7CGeK2crgqSZVlFwIDAQAB;"

========================================
DKIM result: pass
========================================
Signed by: admin@myserverplace.de
Expected Body Hash: frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=
PublicKey: mail._domainkey.myserverplace.de
IN TXT = "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMziMcgPTWK0kSUKxrgHHzEiWxNkZ2/M0Ugyr/8H9WtoCsJUM+Bc1C9VwqJ6yjTidecDrX7aL0lFZ9Mylku/wtSiPw6KLxMg2LG2vrMzlPTB2lmJNmg/EOu3KPC8BtAuOhXfwVH/ttQbzdKJKWqiCJn7jhF5oqEKnOCORxOQXKIwIDAQAB;"
[…]

Logs

You can check the following locations to see if there are errors

/var/log/mail.err
/var/log/mail.warn
/var/log/mail.info
/var/log/syslog

Note

Make sure you enable testing mode for DKIM if you plan to test, you can also cut down the EXPIRY time so the results propagate faster, so to enable testing mode set the key _domainkey to t=y; o=-

Anhang

Siehe auch

DNS/SPF/Test

Dokumentation

Links

Projekt

Weblinks

@@ Zeile 29: / Zeile 29: @@
 #: [[check-auth@verifier.port25.com]]
+; Antwort
   =======================================
   Summary of Results
@@ Zeile 62: / Zeile 63: @@
   PublicKey: mail._domainkey.myserverplace.de
   IN TXT = "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMziMcgPTWK0kSUKxrgHHzEiWxNkZ2/M0Ugyr/8H9WtoCsJUM+Bc1C9VwqJ6yjTidecDrX7aL0lFZ9Mylku/wtSiPw6KLxMg2LG2vrMzlPTB2lmJNmg/EOu3KPC8BtAuOhXfwVH/ttQbzdKJKWqiCJn7jhF5oqEKnOCORxOQXKIwIDAQAB;"
+ […]
 === Logs ===
@@ Zeile 72: / Zeile 74: @@
 ; Note
 Make sure you enable testing mode for DKIM if you plan to test, you can also cut down the EXPIRY time so the results propagate faster, so to enable testing mode set the key <tt>'''_domainkey'''</tt> to <tt>'''t=y; o=-'''</tt>
-<!--
-== Aufruf ==
-<syntaxhighlight lang="bash" highlight="1" line copy>
-</syntaxhighlight>
-== Optionen ==
-{| class="table table-striped table-hover sortable options gnu"
-|-
-! Unix !! GNU !! Parameter !! Beschreibung
-|-
-| || || ||
-|-
-|}
-== Parameter ==
-== Umgebungsvariablen ==
-== Exit-Status ==
-{| class="table table-striped table-hover options col1center"
-|-
-! Wert !! Beschreibung
-|-
-| 0 || Erfolg
-|-
-| >0 || Fehler
-|}
--->
 <noinclude>