PowerMTA configuration example

CNAME-delegated DKIM

Provider-side selector naming for SendGrid-style customer delegation.

This is a teaching baseline, not a drop-in universal production configuration. Replace all example values and test with your installed release.

Configuration

# CNAME-delegated DKIM
# Review every address, hostname, credential and path before use.
host-name pmta1.example.com
postmaster [email protected]

<virtual-mta vmta-12>
    smtp-source-host 192.0.2.22 mail12.example.com
</virtual-mta>

<domain *>
    max-smtp-out 2
    max-msg-per-connection 20
    retry-after 15m
    bounce-after 4d
</domain>

# Publish selector1._domainkey.example.com before enabling signing.
domain-key selector1,example.com,/etc/pmta/dkim/example.com.pem

Deployment checklist

Replace documentation IP addresses and domains.
Confirm PTR, forward DNS, SPF, DKIM, DMARC, and Return-Path alignment.
Validate object names and included files.
Start with low traffic and review responses by provider.
Keep credentials outside publicly readable files and rotate them periodically.

What to monitor

Queue age and destination backlog.
Temporary versus permanent response rates.
Connection failures, TLS negotiation, and authentication errors.
Complaint, bounce, and suppression events.