1 # This is a basic configuration that can easily be adapted to suit a standard
2 # installation. For more advanced options, see opendkim.conf(5) and/or
3 # /usr/share/doc/opendkim/examples/opendkim.conf.sample.
7 # Required to use local socket with MTAs that access the socket as a non-
8 # privileged user (e.g. Postfix)
11 # Sign for example.com with key in /etc/dkimkeys/dkim.key using
12 # selector '2007' (e.g. 2007._domainkey.example.com)
14 #KeyFile /etc/dkimkeys/dkim.key
16 Domain REPLACE_Domain_ECALPER
17 KeyFile /etc/dkimkeys/REPLACE_Selector_ECALPER.private
18 Selector REPLACE_Selector_ECALPER
20 # Commonly-used options; the commented-out versions show the defaults.
21 #Canonicalization simple
25 Canonicalization relaxed/simple
27 # Socket smtp://localhost
29 # ## Socket socketspec
31 # ## Names the socket where this filter should listen for milter connections
32 # ## from the MTA. Required. Should be in one of these forms:
34 # ## inet:port@address to listen on a specific interface
35 # ## inet:port to listen on all interfaces
36 # ## local:/path/to/socket to listen on a UNIX domain socket
38 #Socket inet:8892@localhost
39 #Socket local:/var/run/opendkim/opendkim.sock
40 Socket inet:12301@localhost
45 ### Name of the file where the filter should write its pid before beginning
46 ### normal operations.
48 PidFile /var/run/opendkim/opendkim.pid
51 # Always oversign From (sign using actual From and a null From to prevent
52 # malicious signatures header fields (From and/or others) between the signer
53 # and the verifier. From is oversigned by default in the Debian pacakge
54 # because it is often the identity key used by reputation systems and thus
55 # somewhat security sensitive.
58 ## ResolverConfiguration filename
61 ## Specifies a configuration file to be passed to the Unbound library that
62 ## performs DNS queries applying the DNSSEC protocol. See the Unbound
63 ## documentation at http://unbound.net for the expected content of this file.
64 ## The results of using this and the TrustAnchorFile setting at the same
65 ## time are undefined.
66 ## In Debian, /etc/unbound/unbound.conf is shipped as part of the Suggested
69 # ResolverConfiguration /etc/unbound/unbound.conf
71 ## TrustAnchorFile filename
74 ## Specifies a file from which trust anchor data should be read when doing
75 ## DNS queries and applying the DNSSEC protocol. See the Unbound documentation
76 ## at http://unbound.net for the expected format of this file.
78 TrustAnchorFile /usr/share/dns/root.key
83 ### Change to user "userid" before starting normal operation? May include
84 ### a group ID as well, separated from the userid by a colon.