James Shields's questions

我正在尝试在 CentOS 8 上使用 PostFix 配置 OpenDKIM。

我在中设置了以下内容/etc/opendkim.conf：

PidFile /run/opendkim/opendkim.pid
Mode    sv
Syslog  yes
SyslogSuccess   yes
LogWhy  yes
UserID  opendkim:opendkim
Socket  inet:8891@localhost
Umask   002
SendReports     yes
SoftwareHeader  yes
Canonicalization        relaxed/relaxed
Selector        default
KeyTable        /etc/opendkim/KeyTable
SigningTable    refile:/etc/opendkim/SigningTable
ExternalIgnoreList      refile:/etc/opendkim/TrustedHosts
InternalHosts   refile:/etc/opendkim/TrustedHosts
OversignHeaders From

我的/etc/opendkim/KeyTable文件如下：

mta1._domainkey.esfs.info     esfs.info:mta1:/etc/opendkim/keys/esfs.info/mta1.private

[编辑]

我的/etc/opendkim/SigningTable文件包含：

*@esfs.info default._domainkey.esfs.info

[/编辑]

我的/etc/opendkim/TrustedHosts文件是：

127.0.0.1
::1
*.esfs.info

我使用以下命令生成了我的域密钥：

sudo opendkim-genkey -b 2048 -d your-domain.com -D /etc/opendkim/keys/your-domain.com -s mta1 -v

我将 , 的内容复制/etc/opendkim/keys/esfs.info/mta1.txt到我的 dns 条目中。

但是，当我测试密钥时，我会收到一条警告说它不安全：

$ sudo opendkim-testkey -d esfs.info -s mta1 -vvv
opendkim-testkey: using default configfile /etc/opendkim.conf
opendkim-testkey: checking key 'mta1._domainkey.esfs.info'
opendkim-testkey: key not secure
opendkim-testkey: key OK

当我检查服务器状态时，我得到以下信息：

$ sudo systemctl status opendkim
● opendkim.service - DomainKeys Identified Mail (DKIM) Milter
   Loaded: loaded (/usr/lib/systemd/system/opendkim.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2021-02-08 23:15:12 GMT; 5 days ago
     Docs: man:opendkim(8)
           man:opendkim.conf(5)
           man:opendkim-genkey(8)
           man:opendkim-genzone(8)
           man:opendkim-testadsp(8)
           man:opendkim-testkey
           http://www.opendkim.org/docs.html
 Main PID: 80340 (opendkim)
    Tasks: 3 (limit: 4947)
   Memory: 2.8M
   CGroup: /system.slice/opendkim.service
           └─80340 /usr/sbin/opendkim -x /etc/opendkim.conf -P /run/opendkim/opendkim.pid

Feb 14 12:57:17 wp2.lostcarpark.com opendkim[80340]: CA0EC5E150: signing table references unknown key 'default._domainkey.esfs.info'
Feb 14 12:57:17 wp2.lostcarpark.com opendkim[80340]: CB0C55E150: signing table references unknown key 'default._domainkey.esfs.info'
Feb 14 12:57:17 wp2.lostcarpark.com opendkim[80340]: CBF885E150: signing table references unknown key 'default._domainkey.esfs.info'
Feb 14 12:57:17 wp2.lostcarpark.com opendkim[80340]: CCDDA5E150: signing table references unknown key 'default._domainkey.esfs.info'

以下来自/var/log/maillog：

Feb 14 14:52:24 wp2 postfix/pickup[279532]: warning: 374135E150: message has been queued for 1 days
Feb 14 14:52:24 wp2 postfix/pickup[279532]: 374135E150: uid=0 from=<root>
Feb 14 14:52:24 wp2 postfix/cleanup[279857]: 374135E150: message-id=<[email protected]>
Feb 14 14:52:24 wp2 opendkim[80340]: 374135E150: signing table references unknown key 'default._domainkey.esfs.info'
Feb 14 14:52:24 wp2 postfix/cleanup[279857]: 374135E150: milter-reject: END-OF-MESSAGE from localhost[127.0.0.1]: 4.7.1 Service unavailable - try again later; from=<[email protected]> to=<[email protected]>

希望以上内容对解决问题有所帮助。如果有人能指出我正确的方向，我真的很感激。

我正在设置一个新的 Centos 7 服务器，通过带有 Nginx 的 PHP-FPM 在 PHP 5.6.40 上运行一些旧站点。

但是，我遇到了一个问题，即所有文件似乎都是只读的。

PHP在nginx用户下运行，站点目录归nginx所有，我通过chown尝试了verious文件权限，包括“777”。

我创建了一个简单的程序来说明：

<?php
$fileList = glob('*');

//Loop through the array that glob returned.
foreach($fileList as $filename){
   //Simply print them out onto the screen.
   echo $filename;
   if (is_writable($filename))
      echo ' - Yes!';
   else
      echo ' - No.';
   echo '<br>';
}

这将输出站点目录中的文件，每个文件名旁边都有“否”。

任何关于可能导致这种情况的提示，或者我如何能够调试的任何提示都将不胜感激。

我正在尝试使用以下说明在 Centos 上升级到 Postfix 3：

https://www.ryadel.com/en/postfix-3-install-setup-linux-centos-for-sending-mail-smtp-smtps-starttls/

但是，我收到以下依赖错误：

$ sudo yum install postfix3
Loaded plugins: fastestmirror, priorities, replace, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: mirror.strencom.net
 * extras: mirror.strencom.net
 * remi-php56: mirror.netweaver.uk
 * remi-php72: mirror.netweaver.uk
 * remi-safe: mirror.netweaver.uk
 * updates: ftp.heanet.ie
gf                                                                                                                                                | 2.9 kB     00:00     
gf/primary_db                                                                                                                                     |  44 kB     00:00     
gf-plus                                                                                                                                           | 2.9 kB     00:00     
gf-plus/primary_db                                                                                                                                | 104 kB     00:00     
156 packages excluded due to repository priority protections
Resolving Dependencies
--> Running transaction check
---> Package postfix3.x86_64 2:3.5.2-1.gf.el7 will be installed
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.2)(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libsasl2.so.3()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libicuuc.so.50()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libicui18n.so.50()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libicudata.so.50()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libdb-5.3.so()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Running transaction check
---> Package libicu-last.x86_64 0:50.1.2-17.el6.remi will be installed
---> Package postfix3.x86_64 2:3.5.2-1.gf.el7 will be installed
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.2)(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libsasl2.so.3()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Processing Dependency: libdb-5.3.so()(64bit) for package: 2:postfix3-3.5.2-1.gf.el7.x86_64
--> Finished Dependency Resolution
Error: Package: 2:postfix3-3.5.2-1.gf.el7.x86_64 (gf-plus)
           Requires: libsasl2.so.3()(64bit)
Error: Package: 2:postfix3-3.5.2-1.gf.el7.x86_64 (gf-plus)
           Requires: libcrypto.so.10(OPENSSL_1.0.2)(64bit)
Error: Package: 2:postfix3-3.5.2-1.gf.el7.x86_64 (gf-plus)
           Requires: libdb-5.3.so()(64bit)
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

任何有关纠正这些依赖关系的建议将不胜感激。

亲切的问候，

詹姆士