问题[postfix]

OpenDKIM 使用本机配置的 Postfix 邮件服务器进行签名

有一个任务我不知道该做什么了.. 任务： - 有 2 个域 example.com example.net - 两者都由我的 postfix 提供服务（我还提出了我自己的本地 dns） DKIM 配置在example.com - 从 example.com 发送邮件时 - 创建签名 如何确保检查相同的字母...

opendkim 配置：

    AutoRestart Yes
AutoRestartRate 10/1h
PidFile /var/run/opendkim/opendkim.pid
Mode sv
Syslog yes
SyslogSuccess yes
LogWhy yes
UserID opendkim:opendkim
Socket inet:8891@localhost
Umask 022
Canonicalization relaxed/relaxed
Selector default
MinimumKeyBits 1024
KeyFile /etc/postfix/dkim/mail.example.com.private
KeyTable /etc/postfix/dkim/keytable
SigningTable refile:/etc/postfix/dkim/signingtable

签署信件 - 但不检查 从外面我无法发送信件，原因很明显

下午好！我在与垃圾邮件发送者的不平等斗争中需要帮助）这是我的后缀配置（与问题有关的部分）：

smtpd_restriction_classes = verify_sender,
                            rbl_cbl_abuseat_org,
                            rbl_sbl_spamhaus_org,
                            rbl_dul_ru, rbl_spamcop,
                            white_client_ip,
                            black_client_ip,
                            block_dsl,
                            helo_access,
                            white_client,
                            black_client,
                            mx_access

verify_sender        = reject_unverified_sender, permit 
rbl_cbl_abuseat_org  = reject_rbl_client cbl.abuseat.org
rbl_dul_ru           = reject_rbl_client dul.ru
rbl_sbl_spamhaus_org = reject_rbl_client sbl.spamhaus.org
rbl_spamcop          = reject_rbl_client bl.spamcop.net
white_client_ip      = check_client_access pcre:/etc/postfix/config/white_client_ip
black_client_ip      = check_client_access pcre:/etc/postfix/config/black_client_ip
white_client         = check_sender_access pcre:/etc/postfix/config/white_client
black_client         = check_sender_access pcre:/etc/postfix/config/black_client
block_dsl            = regexp:/etc/postfix/config/block_dsl
helo_access          = check_helo_access pcre:/etc/postfix/config/helo_checks
mx_access            = check_sender_mx_access cidr:/etc/postfix/config/mx_access

smtpd_client_restrictions = white_client_ip,
                            black_client_ip,
                            white_client,
                            black_client,
                            helo_access,
                            block_dsl,
                            rbl_dul_ru,
                            rbl_sbl_spamhaus_org,
                            rbl_spamcop,
                            rbl_cbl_abuseat_org,
                            permit_mynetworks,
                            permit_sasl_authenticated,
                            reject_unauth_destination,
                            reject_unauth_pipelining,
                            reject_unknown_address,
                            reject_unknown_recipient_domain,
                            reject_unknown_sender_domain
smtpd_sender_restrictions = white_client,
                            white_client_ip,
                            black_client_ip,
                            reject_unknown_recipient_domain,
                            reject_unknown_sender_domain,
                            reject_non_fqdn_recipient,
                            reject_non_fqdn_sender,
                            permit_sasl_authenticated,
                            permit_mynetworks,
                            mx_access,
                            reject_unlisted_sender,
                            reject_unauth_destination
smtpd_recipient_restrictions = verify_sender,
                               white_client,
                               helo_access,
                               reject_non_fqdn_sender,
                               reject_non_fqdn_recipient,
                               reject_unknown_sender_domain,
                               reject_unknown_recipient_domain,
                               reject_unauth_pipelining,
                               permit_sasl_authenticated,
                               permit_mynetworks,
                               reject_unlisted_recipient,
                               reject_unknown_address,
                               reject_unauth_destination,
                               reject_multi_recipient_bounce, 
                               check_policy_service inet:localhost:10023

smtpd_data_restrictions = reject_unauth_pipelining,
                          reject_multi_recipient_bounce,
                          permit
smtp_skip_5xx_greeting = no
smtpd_reject_unlisted_sender = yes
smtpd_reject_unlisted_recipient = yes

MX 已正确注册，有 DKIM、SPF 记录（无 DMARC），已启用灰名单。因此，垃圾邮件周期性地落在 info@ 和 contact@ 邮箱上；其显着特点是发件人和收件人都与邮件域无关，但标题与邮件域相关：

Received: from mail.spammers.net (mail.spammers.net [ip-address])
        by my-post.domain.com (Postfix) with ESMTP id 5B56A00000
        for <info@domain.com>; Sun,  2 Jul 2017 20:42:10 +0000 (CEST)
Message-ID: <it581458.43231@mail.spammers.net>
Reply-To: "Original SPAM" <it@spammers.net>
From: "Original SPAM" <it@spammers.net>
To: <g.meriseeg@postmotmydomain.gg>
Subject: Subj spammers
Date: Sun, 02 Jul 2017 20:14:39 +0000

如何过滤此类邮件？有 spamassasin，但即使在用 10 封类似的电子邮件训练他之后，他也会跳过这些电子邮件。

我安装了 postfix，问题是如何设置 DKIM，据我了解，那里需要一对密钥，在 Yandex 域的邮件描述中，您清楚地转到了某个部分 - https://yandex.ru/ support/pdd/set-mail/dkim.xml这里是签名，将其插入DNS中域的TXT记录中。如果我是我自己的邮件服务器： 1）我在哪里可以获得键值对？2）以后在哪里插入到postfix？