Nick Hemmesch wrote:
Hi John,
Just so we are on the same page, the dns entry is made by the person
providing your dns service, not just local caching.
If you provide your own dns service with djbdns (tinydns) here is a
typical entry from one of my nameservers:
###################################################
## ndhsdns.com djbdns zone
###################################################
Zndhsdns.com:ns1.ndhsdns.com.:postmaster.ndhsdns.com.:2006022001:
&ndhsdns.com::ns1.ndhsdns.com.
&ndhsdns.com::ns2.ndhsdns.com.
@ndhsdns.com:216.221.100.227:mail.ndhsdns.com.:0
+ndhsdns.com:216.221.100.227
=ns1.ndhsdns.com:216.221.100.227
=ns2.ndhsdns.com:216.221.101.82
=www.ndhsdns.com:216.221.100.227
=www2.ndhsdns.com:216.221.101.82
=ftp.ndhsdns.com:216.221.100.227
=ftp2.ndhsdns.com:216.221.101.82
'_domainkey.ndhsdns.com:o=-; [EMAIL PROTECTED]
'private._domainkey.ndhsdns.com:k=rsa; p=MEwwD...[too long for here]
'ndhsdns.com:v=spf1 a mx include\072srt.com ~all
'dsl-100-227.srtnet.com:v=spf1 a -all
'mail.ndhsdns.com:v=spf1 a -all
The txt entries can be made anywhere but I normally place then at the end
just to keep it simple.
Regards,
Nick
How about if I am using BIND. I have a runnig slave/caching DNS server
on my mail mashine. Kay generation is clear but how I generate and where
do i store the txt entries. I have access to both the mail server and
the master dns server that holds my zone.
Thans for the support
Vesko Nedev
I am using djbdns and you have this on your documentation.
If you use djbdns, a typical entry will look like this:
'_domainkey.yourdomain.com:o=-; [EMAIL PROTECTED]
'private._domainkey.yourdomain.com:k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQ
. . .
Where exactly do I put this? Sorry. I am just confused.
Quoting Nick Hemmesch <[EMAIL PROTECTED]>:
hi all,
I see the recent update of qmailtoaster installs domainkeys.
my /etc/tcprules.d/tcp.smtp check for that but I do not have the
keys
generated (stil testing on my development server)
So are there any downsides if I do not have
/var/qmail/control/domainkeys/%/private but it is listed in
/etc/tcprules.d/tcp.smtp
Thanks for the fedback
Vesko Nedev
Hi Vesko,
If there is no private key available the mail is send unsigned. You
will
still check domainkeys on all incoming mail.
When you make your keys and make your dns entry, other servers will
be
able to validate the mail you send.
It is very easy to implement:
http://www.qmailtoaster.com/qt-doc/QT-README.domainkeys
Regards,
Nick
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
