<div dir="ltr">Hi folks,<br><br>I have set up DKIM and DMARC (monitoring only at this point) on my domain. It's a Google Apps domain and it all seems to be working correctly.<br><br>I have a couple of in-house SMTP-only servers that we use for mail from printers, PBX's and so on. Since these mails come a variety of random addresses such as ricoh_printer@ricoh.localdomain and the like, I need to get these SMTP (Postfix on Ubuntu 14.04) in on the DKIM act. I have already added them to the SPF record, and Google happily accepts all mail from them<div class="gmail_default" style="font-size:small;display:inline">.</div><br><br>So I need to sign all mail emanating from these SMTP servers. But, as far as I understand, I can only have one DomainKey record per domain. So what do I do here? I guess I need to install OpenDKM and then sign all outbound mail with the same key that GoogleApps is using? Am I understanding this right?<br><br><div class="gmail_default" style="font-size:small;display:inline">T</div>his doc:<br><br><a href="https://www.xpertdns.com/billing/knowledgebase/1/DomainKeys-or-DKIM.html">https://www.xpertdns.com/billing/knowledgebase/1/DomainKeys-or-DKIM.html</a><br><br><div class="gmail_default" style="font-size:small;display:inline">says</div>:<br><br>"You can only setup one DomainKey policy record per domain - but you can setup multiple selector records. The selector record holds your public key. You can setup multiple selectors to be used on different servers if you like, or you can use one selector for all your outgoing email."<div class="gmail_default" style="font-size:small;display:inline"> I don't quite understand what selector records are ... is this even the path I need to be going down?</div><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><br></div><div><div class="gmail_default" style="font-size:small">Most of the documentation revolves around an initial setup of DKIM, which is the part I already have working. Adding a second and subsequent server for signing those "random" internal mails is where I am stuck. Is there a method to just copy my public key from Google and use it on my existing SMTP box to sign all outbound mail with OpenDKM?</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">I'd be grateful if somebody can guide me on how I proceed from here?</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">ed</div><br></div><div><br></div><div><br><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">_________________________________________ </span><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><b style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:11pt">Edward O. Holcroft</b><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">IT Operations Manager</span><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><b style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:11pt">Madsen, Kneppers & Associates, Inc.</b><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">Construction Consultants & Engineers </span><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">11695 Johns Creek Parkway, Suite 250</span><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">Johns Creek, GA 30097</span><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><b style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">O</b><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"> 770.446.9606 | </span><b style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">F</b><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"> 770.446.9612 | </span><b style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px">C</b><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"> 770.630.0949 | <a href="mailto:eholcroft@mkainc.com" target="_blank">eholcroft@mkainc.com</a></span><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><br style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><span style="color:rgb(0,0,0);font-family:Arial,Helvetica,san-serif;font-size:13.3333px"><a href="http://www.mkainc.com" target="_blank">www.mkainc.com</a> </span><br></div></div></div></div></div></div></div></div>
</div>
<br>
<span style="font-family:arial"><font size="2">MADSEN, KNEPPERS & ASSOCIATES USA, MKA Canada Inc. WARNING/CONFIDENTIALITY NOTICE: This message may be confidential and/or privileged. If you are not the intended recipient, please notify the sender immediately then delete it - you should not copy or use it for any purpose or disclose its content to any other person. Internet communications are not secure. You should scan this message and any attachments for viruses. Any unauthorized use or interception of this e-mail is illegal.</font></span>