Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
安装和部署 Exchange 服务器 (2013/2010/2007) 中的 DKIM 在本主题中,我将介绍如何将 DKIM 签名添加到 Exchange 服务器的出站电子邮件。我还将介绍使用 DKIM"选择器"和"发件人规则"。
DKIM 是如何工作的? 当一封电子邮件声称来自特定域时,DKIM 提供一种机制,接收系统可以确定电子邮件授权由该域发送。工作流程进行了说明,如下所示:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
为域创建 DKIM 单击"DKIM"在管理器中的,单击"New"以创建新的域 DKIM 签名。DKIM 签名基于域的发件人的电子邮件地址,它是无关 Exchange 服务器的名称。
你可以简单地输入您的发件人域,使用其他参数的默认设置,最后单击"Save"以创建您的 DKIM 签名。
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
DKIM 参数 下面是有关 DKIM 参数的详细的信息:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
导出 DKIM 公共密钥 我有介绍,因为收件人的邮件系统需要使用公钥来验证 DKIM 签名,所以我们需要向域 DNS 服务器部署 DKIM 公钥,然后收件人服务器可以查询 DNS 服务器来获取公钥。
现在打开 DKIM 管理器,然后选择您的域并单击"Export Public Key":
导出公钥后,应将其部署在您的域 DNS 服务器中。
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
部署到 Windows DNS 服务器的 DKIM 公共密钥 如果您的域由 Windows DNS 服务器托管的则应如下部署 DKIM 公钥:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Windows DNS 服务器 (可选 *) 中添加 DKIM 策略 此 DNS 记录是可选的。如果你不设定 DKIM 政策,然后"o=~;"默认情况下使用。
工作流程进行了说明,如下所示:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
部署 DKIM 其他 DNS 服务器 (Network Solutions,Bind...) 中的公共密钥 如果您的域由其他 DNS 服务器托管的则应如下部署公钥:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
DKIM 发件人规则 有时您需要发送一封电子邮件,发件人地址不属于您的服务器。
在这种情况下,不能将 DKIM 签名添加到此类电子邮件,因为您没有权限向发件人的域 DNS 服务器部署 DKIM 公钥。当然如果你不从外部电子邮件地址发送电子邮件或您不需要为那些电子邮件签名 DKIM,你完全可以忽略这个话题。
您可以使用"发件人规则",如下所示:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
DKIM 选择器 若要支持多个并发的公开密钥的发送域,DNS 命名空间是由"选择器"进一步细分。"选择器"是"_domainkey"命名空间下的任意名称。
最重要的事情是:"选择器"指示您 DKIM 公共密钥的位置。例如: 如果您的域选择器:"s1024",你公钥 DNS 记录是"s1024._domainkey.yourdomain";如果您的域选择器:"mta1",你公钥 DNS 记录是"mta1._domainkey.yourdomain"。
如果你有只一个 Exchange 服务器,则可以忽略以下各节。
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
为多个 Exchange 服务器上的同一域使用一个单一的 DKIM 选择器 如果您的服务器的所有使用 EA DKIM 软件,您应如下部署证书:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
用多个 Exchange 服务器上的同一域的多个 DKIM 选择器 如果你不想将证书复制到所有服务器,或者您有其他 DKIM 插件与 DKIM 签名的另一台服务器,您可以为不同的服务器使用不同的选择器。
Forum Jump
EmailArchitect Support
Email Component Development
- EASendMail SMTP Component - .NET Version
- EASendMail SMTP Component - Windows Store Apps
- EASendMail SMTP ActiveX Object
- EAGetMail POP3 & IMAP4 Component - .NET Version
- EAGetMail POP3 & IMAP4 ActiveX Object
Exchange Server and IIS SMTP Plugin
- DomanKeys/DKIM for Exchange Server and IIS SMTP
- Disclaimer and S/MIME for Exchange Server and IIS
EmailArchitect Email Server
- EmailArchitect Email Server (General)
- EmailArchitect Email Server Development
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.