This is a playbook for setting up postfix email server with DKIM using opendkim. I've not kept this up to date but may of use.

https://github.com/KarmaComputing/ansible-postfix-dovecot-dkim/blob/e99a986f413aa7e4a73f4a6086f1471dd1ec7436/mailserver/mail-server.yaml#L87 

Kind regards
Chris 

On 24 Jan 2024 13:02, Ian via BitFolk Users <users@mailman.bitfolk.com> wrote:
Gavin Westwood said:

I only found out a few days ago that Gmail and Yahoo (and possibly others) will require senders to have SPF, DKIM and DMARC records (as well as certain other criteria)


In practice, Yahoo have been 'we don't care how bad our users are at sending spam, you need to obey these rules before we will give you a chance of emailing them' for some years now. 

Google have got pickier over the past couple of years. 

I was completely unable to get Microsoft's services to accept email from a server elsewhere, despite SPF, DKIM & DMARC. They'd accepted mail from it at a previous IP address, but not from a new one with the same provider. Nothing I tried would work: MS would just give me responses with out of date broken links when I tried contacting them. In the end, I moved the VPS. 

If someone wants to have a class action over the behaviour of the big three over this, I am in. 

Ian 

from February 2024: https://postmarkapp.com/blog/2024-gmail-yahoo-email-requirements

I'm currently setting this up for a couple of my domains (it's already working on a test sub-domain) to make sure I do it right, but thought that I should drop a mail here for anyone else who isn't already aware.

Some useful links:

https://support.google.com/a/answer/81126

https://senders.yahooinc.com/best-practices/

https://www.linuxbabe.com/mail-server/setting-up-dkim-and-spf (Postfix and DNS)

https://www.linuxbabe.com/mail-server/create-dmarc-record

https://www.exim.org/exim-html-current/doc/html/spec_html/ch-dkim_spf_srs_and_dmarc.html

Testing:

https://www.mail-tester.com

https://www.mail-tester.com/spf-dkim-check

Emailing check-auth@verifier.port25.com from the domain you are testing.

Thanks

Gavin

_______________________________________________
BitFolk Users mailing list <users@mailman.bitfolk.com>
You're subscribed as <lovingboth@gmail.com>
Unsubscribe: <https://mailman.bitfolk.com/mailman/postorius/lists/users.mailman.bitfolk.com/>
or send an email to <users-leave@mailman.bitfolk.com>