Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
安裝和部署 Exchange 伺服器 (2013/2010/2007) 中的 DKIM 在本主題中,我將介紹如何將 DKIM 簽名添加到 Exchange 伺服器的出站電子郵件。我還將介紹使用 DKIM"選擇器"和"寄件者規則"。
DKIM 是如何工作的? 當一封電子郵件聲稱來自特定域時,DKIM 提供一種機制,接收系統可以確定電子郵件授權由該域發送。工作流程進行了說明,如下所示:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
為域創建 DKIM 按一下"DKIM"在管理器中的,按一下"New"以創建新的域 DKIM 簽名。DKIM 簽名基於域的寄件者的電子郵件地址,它是無關 Exchange 伺服器的名稱。
你可以簡單地輸入您的寄件者域,使用其他參數的預設設置,最後按一下"Save"以創建您的 DKIM 簽名。
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
DKIM 參數 下面是有關 DKIM 參數的詳細的資訊:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
匯出 DKIM 公共金鑰 我有介紹,因為收件者的郵件系統需要使用公開金鑰來驗證 DKIM 簽名,所以我們需要向域 DNS 伺服器部署 DKIM 公開金鑰,然後收件者伺服器可以查詢 DNS 伺服器來獲取公開金鑰。
現在打開 DKIM 管理器,然後選擇您的域並按一下"Export Public Key":
匯出公開金鑰後,應將其部署在您的域 DNS 伺服器中。
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
部署到 Windows DNS 伺服器的 DKIM 公共金鑰 如果您的域由 Windows DNS 伺服器託管的則應如下部署 DKIM 公開金鑰:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Windows DNS 伺服器 (可選 *) 中添加 DKIM 策略 此 DNS 記錄是可選的。如果你不設定 DKIM 政策,然後"o=~;"預設情況下使用。
工作流程進行了說明,如下所示:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
部署中其他 DNS 伺服器 (Network Solutions,BIND...) 的 DKIM 公開金鑰 如果您的域由"Network Solutions"DNS 伺服器、 BIND DNS 伺服器或其他 DNS 伺服器,您應該部署公開金鑰像這樣:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
DKIM 寄件者規則 有時您需要發送一封電子郵件,寄件者位址不屬於您的伺服器。
在這種情況下,不能將 DKIM 簽名添加到此類電子郵件,因為您沒有許可權向寄件者的域 DNS 伺服器部署 DKIM 公開金鑰。當然如果你不從外部電子郵件地址發送電子郵件或您不需要為那些電子郵件簽名 DKIM,你完全可以忽略這個話題。
您可以使用"寄件者規則",如下所示:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
DKIM 選擇器 若要支援多個併發的公開金鑰的發送域,DNS 命名空間是由"選擇器"進一步細分。"選擇器"是"_domainkey"命名空間下的任意名稱。
最重要的事情是:"選擇器"指示您 DKIM 公共金鑰的位置。例如: 如果您的域選擇器:"s1024",你公開金鑰 DNS 記錄是"s1024._domainkey.yourdomain";如果您的域選擇器:"mta1",你公開金鑰 DNS 記錄是"mta1._domainkey.yourdomain"。
如果你有只一個 Exchange 伺服器,則可以忽略以下各節。
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
為多個 Exchange 伺服器上的同一域使用一個單一的 DKIM 選擇器 如果所有伺服器都使用 EA DKIM,你應該如下部署證書:
Rank: Administration
Groups: Administrators
Joined: 11/11/2010(UTC) Posts: 1,153
Thanks: 9 times Was thanked: 55 time(s) in 55 post(s)
用多個 Exchange 伺服器上的同一域的多個 DKIM 選擇器 如果你不想將證書複製到所有伺服器,或者您有使用金鑰組證書不支援 EA DKIM 簽名 DKIM 的另一台伺服器,您可以為不同的伺服器使用不同的選擇器。
Forum Jump
EmailArchitect Support
Email Component Development
- EASendMail SMTP Component - .NET Version
- EASendMail SMTP Component - Windows Store Apps
- EASendMail SMTP ActiveX Object
- EAGetMail POP3 & IMAP4 Component - .NET Version
- EAGetMail POP3 & IMAP4 ActiveX Object
Exchange Server and IIS SMTP Plugin
- DomanKeys/DKIM for Exchange Server and IIS SMTP
- Disclaimer and S/MIME for Exchange Server and IIS
EmailArchitect Email Server
- EmailArchitect Email Server (General)
- EmailArchitect Email Server Development
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.