#!/bin/bash - 
# 需要分发到邮件集群机 批量安装opendkim 
# 先增加好 epel源

#安装opendkim
yum install opendkim -y 

#更新opendkim配置
cat  <<EOF  >>  /etc/opendkim.conf
Canonicalization        relaxed/relaxed
ExternalIgnoreList      refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrustedHosts
KeyTable                refile:/etc/opendkim/KeyTable
LogWhy                  Yes
MinimumKeyBits          1024
Mode                    sv
PidFile                 /var/run/opendkim/opendkim.pid
SigningTable            refile:/etc/opendkim/SigningTable
Socket                  inet:8891@127.0.0.1
Syslog                  Yes
SyslogSuccess           Yes
TemporaryDirectory      /var/tmp
UMask                   022
UserID                  opendkim:opendkim
EOF

#创建秘钥
#假设主机的名称已设置为 example.com
hname=$(hostname)

mkdir /etc/opendkim/keys
opendkim-genkey -D /etc/opendkim/keys/ -d  $hname  -s  default
chown opendkim  /etc/opendkim/keys/default.private

#将生成的秘钥导入到 KeyTable
cat <<EOF  >> /etc/opendkim/KeyTable
default._domainkey.${hname}  ${hname}:default:/etc/opendkim/keys/default.private
default._domainkey.mail.${hname}  mail.${hname}:default:/etc/opendkim/keys/default.private
EOF

#导入到SignTable
cat <<EOF  >>  /etc/opendkim/SigningTable
*@${hname} default._domainkey.${hname}
*@mail.${hname} default._domainkey.mail.${hname}
EOF

#设置 postfix 
cat <<EOF  >>  /etc/postfix/main.cf
smtpd_milters           = inet:127.0.0.1:8891
non_smtpd_milters       = inet:127.0.0.1:8891
milter_protocol         = 2
milter_default_action   = accept
EOF

#service  opendkim  restart
#postfix reload
#service  postfix  restart
service rsyslog start