作者 主題: 請問 DomainKeys filter for Postfix 相關問題  (閱讀 2592 次)

0 會員 與 1 訪客 正在閱讀本文。

bruce_wu

  • 憂鬱的高中生
  • ***
  • 文章數: 91
    • 檢視個人資料
因 Yahoo 及一些大網站都有開始使用此機制

自己也參考了
http://phorum.study-area.org/viewtopic.php?t=40579
官方 http://jason.long.name/dkfilter/
相關資料設置上已經完成

現在可以正常的收發,都沒問題

但很奇怪,我使用 Windows 端的 Outlook 去寄信給自己
假設該 mail server doamin 為: mydoamin.idv.tw
我的信箱為: bruce_wu@mydomain.idv.tw

outlook 上的帳號設定
1.沒有使用 SSL 連接
2.勾選「我的伺服器需要驗證」,也就是使用「SASL 驗證」
而我自己寄給自己的信,去看檔頭,如下:
代碼: [選擇]

Return-Path: <bruce_wu@mydomain.idv.tw>
X-Original-To: bruce_wu@mydomain.idv.tw
Delivered-To: bruce_wu@mydomain.idv.tw
Received: from mydomain.idv.tw (localhost.localdomain [127.0.0.1])
by mydomain.idv.tw (Postfix) with ESMTP id BBD751F8FCA
for <bruce_wu@mydomain.idv.tw>; Thu, 29 Mar 2007 11:12:26 +0800 (CST)
Authentication-Results: MailServer from=bruce_wu@mydomain.idv.tw; domainkey=neutral (no signature; no policy for mydomain.idv.tw)
Received: from BRUCEWU (61-62-12-46-adsl-nan.STATIC.so-net.net.tw [61.62.12.46])
by mydomain.idv.tw (Postfix) with ESMTP
for <bruce_wu@mydomain.idv.tw>; Thu, 29 Mar 2007 11:12:26 +0800 (CST)
Message-ID: <00b401c771ae$1d15e1d0$a803a8c0@BRUCEWU>
Reply-To:<bruce_wu@mydomain.idv.tw>
From: <bruce_wu@mydomain.idv.tw>
To:<bruce_wu@mydomain.idv.tw>


問題:

Authentication-Results: MailServer from=bruce_wu@mydomain.idv.tw; domainkey=neutral (no signature; no policy for mydomain.idv.tw)

有這一段,卻沒有 DomainKey-Signature: 的驗證檔頭呢?

這一封是寄給 Yahoo 的:
代碼: [選擇]

From =?big5?B?R2VuU2FsZXNfp8Wx0rvKIChCcnVjZV9XdSk=?= Wed Mar 28 14:57:41 2007
Return-Path: <bruce_wu@mydomain.idv.tw>
Authentication-Results: mta115.mail.tp2.yahoo.com  from=mydomain.idv.tw; domainkeys=neutral (no sig)
Received: from 219.18.33.199  (EHLO mydomain.idv.tw) (219.18.33.199)
  by mta115.mail.tp2.yahoo.com with SMTP; Wed, 28 Mar 2007 14:58:04 +0800
Received: from mydomain.idv.tw (localhost.localdomain [127.0.0.1])
by mydomain.idv.tw (Postfix) with ESMTP id 41D371F8FCF;
Wed, 28 Mar 2007 15:11:57 +0800 (CST)
Authentication-Results: MailServer from=bruce_wu@mydomain.idv.tw; domainkey=neutral (no signature; no policy for mydomain.idv.tw)
Received: from BRUCEWU (61-62-12-46-adsl-nan.STATIC.so-net.net.tw [61.62.12.46])
(using TLSv1 with cipher RC4-MD5 (128/128 bits))
(No client certificate requested)
by mydomain.idv.tw (Postfix) with ESMTP;
Wed, 28 Mar 2007 15:11:56 +0800 (CST)
Message-ID: <00de01c77106$65ba7750$a803a8c0@BRUCEWU>
Reply-To: <bruce_wu@mydomain.idv.tw>
From: <bruce_wu@mydomain.idv.tw>
To: <bruce_wu@yahoo.com.tw>

因為沒有  DomainKey-Signature 所以 Yahoo 也回應了 Authentication-Results: mta115.mail.tp2.yahoo.com  from=mydomain.idv.tw; domainkeys=neutral (no sig)

2.如果我將 Outlook 上的帳號設定 所使用的 SMTP Port 原本為25,我將他改成 587 Port ,這樣寄出去的信件給自己會或給Yahoo檔頭就正常,檔頭就會如下:
以下這一封是寄給自己的:
代碼: [選擇]

Return-Path: <bruce_wu@mydomain.idv.tw>
X-Original-To: bruce_wu@mydomain.idv.tw
Delivered-To: bruce_wu@mydomain.idv.tw
Received: from mydomain.idv.tw (localhost.localdomain [127.0.0.1])
by mydomain.idv.tw (Postfix) with ESMTP id 73F131F8FCA
for <bruce_wu@mydomain.idv.tw>; Thu, 29 Mar 2007 11:09:59 +0800 (CST)
DomainKey-Signature: a=rsa-sha1;
h=Received:Message-ID:Re
ply-To:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-
MSMail-Priority:X-Mailer:X-MimeOLE:; q=dns; c=nofws; s=dk;
d=mydomain.idv.tw;
b=vSpAzu43UChRXAKPfUD9HeJ4/clIO7pa7PzWSVLidYwTmBFxz52wfp0PTWBsAQzoF
tCerJxpm5YQd30t53w8SgWIIKkVESrqzEoKfu7vgQGmcYy9CJtgMy90REF4OtdR
Received: from BRUCEWU (61-62-12-46-adsl-nan.STATIC.so-net.net.tw [61.62.12.46])
by mydomain.idv.tw (Postfix) with ESMTP id 716F71F8FCA
for <bruce_wu@mydomain.idv.tw>; Thu, 29 Mar 2007 11:09:54 +0800 (CST)
Message-ID: <00a001c771ad$c24f3440$a803a8c0@BRUCEWU>
Reply-To: <bruce_wu@mydomain.idv.tw>
From: <bruce_wu@mydomain.idv.tw>
To: <bruce_wu@mydomain.idv.tw>

檔頭的部分已經含有 DomainKey-Signature: 了,所以沒問題

以下這一封是寄給 Yahoo 的
代碼: [選擇]

From =?big5?B?R2VuU2FsZXNfp8Wx0rvKIChCcnVjZV9XdSk=?= Thu Mar 29 08:52:40 2007
Return-Path: <bruce_wu@mydomain.idv.tw>
Authentication-Results: mta170.mail.tp2.yahoo.com  from=mydomain.idv.tw; domainkeys=pass (ok)
Received: from 219.18.33.199  (EHLO mydomain.idv.tw) (219.18.33.199)
  by mta170.mail.tp2.yahoo.com with SMTP; Thu, 29 Mar 2007 08:52:49 +0800
Received: from mydomain.idv.tw (localhost.localdomain [127.0.0.1])
by mydomain.idv.tw (Postfix) with ESMTP id 9880F1F8FD6
for <chiiming_wu@yahoo.com.tw>; Thu, 29 Mar 2007 09:06:47 +0800 (CST)
DomainKey-Signature: a=rsa-sha1;
h=Received:Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Co
ntent-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE:; q=dns;
c=nofws; s=dk; d=mydomain.idv.tw;
b=jo19Pr2aG3BCE/0yK2yD/uy+3mzhsABW9QClp/GxojDCT07UnVTv8uhUkYypLCfdD
K9aY9hw7OZ6Ke0UJvj4LEEpJnecaMbNJc8QqaLHs/x+3lXRZMnX5iFSWddlXVSazQ0h
s+2Vy4Ihj2nF6UOd4rf9QbuBrGlJUiGAcRC7NAU=
Received: from BRUCEWU (61-62-12-46-adsl-nan.STATIC.so-net.net.tw [61.62.12.46])
by mydomain.idv.tw (Postfix) with ESMTP id 9D3681F8FD6
for <chiiming_wu@yahoo.com.tw>; Thu, 29 Mar 2007 09:06:44 +0800 (CST)
Message-ID: <006101c7719c$8de88050$a803a8c0@BRUCEWU>
Reply-To: <bruce_wu@mydomain.idv.tw>
From: <bruce_wu@mydomain.idv.tw>
To: <bruce_wu@yahoo.com.tw>


因為檔頭包含了 DomainKey-Signature ,所以這封 Yahoo 就有驗證成功了

Authentication-Results: mta170.mail.tp2.yahoo.com  from=mydomain.idv.tw; domainkeys=pass (ok)


3.從 Yahoo 的 WebMail 發信到我的伺服器戶用
代碼: [選擇]

Return-Path: <bruce_wu@yahoo.com.tw>
X-Original-To: bruce_wu@mydomain.idv.tw
Delivered-To: bruce_wu@mydomain.idv.tw
Received: from mydomain.idv.tw (localhost.localdomain [127.0.0.1])
by mydomain.idv.tw (Postfix) with ESMTP id 9C8E81F8FD5
for <bruce_wu@mydomain.idv.tw>; Thu, 29 Mar 2007 17:05:50 +0800 (CST)
Authentication-Results: MailServer from=bruce_wu@yahoo.com.tw; domainkey=pass
Received: from web73401.mail.tp2.yahoo.com (web73401.mail.tp2.yahoo.com [203.188.201.61])
by mydomain.idv.tw (Postfix) with SMTP
for <bruce_wu@mydomain.idv.tw>; Thu, 29 Mar 2007 17:05:49 +0800 (CST)
Received: (qmail 16081 invoked by uid 60001); 29 Mar 2007 08:51:38 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com.tw;
  h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID;
  b=asR2wVHrMj3wNr9VeSTJPHcXuX+FSWhsZcJNvNqIXyhzOnexHyYYLny2Ozhz4vgscQofo7viOcLIbRDwnGJ38xpY7zQNmTKNprV1uI9d3U13dQEia/N2wPfApzhuXonwIifAnj6CHZ1lrlxs3oiQbHL9HEyQjguBVOMg2aBP58M=;
X-YMail-OSG: 5CknVR4VM1nrQt.X.kpAR5lOrK16cBi55VuotbKoOz5_rCahbx1R2sG1uSBmrX7O5mR.0gku4VdCCVMTDxREa2TbwtQsQzkYRUJG
Received: from [61.62.42.123] by web73401.mail.tp2.yahoo.com via HTTP; Thu, 29 Mar 2007 16:51:38 CST
X-Mailer: YahooMailRC/476 YahooMailWebService/0.7.41.8
Date: Thu, 29 Mar 2007 16:51:38 +0800 (CST)
From: Bruce_Wu <bruce_wu@yahoo.com.tw>
To: bruce_wu@mydomain.idv.tw


我的伺服器的 DomainKeys 的 dkfilter.in 有正常分析Yahoo所寄來的信件,檔頭內有DomainKey-Signature的簽署,其中驗證成功訊息

Authentication-Results: MailServer from=bruce_wu@yahoo.com.tw; domainkey=pass

所以 Yahoo 的來信通過了檢驗,代表來信檢查沒問題


以上是安裝後的測試結果!
而問題是怎麼我將發信端的 SMTP 連接改連 587 Port ,所發出的信件才會有 DomainKey-Signature 呢?

在相關資料中並沒有提起要發信端修改連接 SMTP 的  Port

不知道這問題該如何解決當使用者發信端連接 SMTP 時也是使用 25 Port 然後 DomainKeys 能夠正常運作呢?

謝謝!