Nick - I've created the domain key, but i don't know what file to put it
in. what file is this that you have copied here? and what file would
we put it in if we would run bind?
thanks!
Dewain
Nick Hemmesch wrote:
Hi John,
Just so we are on the same page, the dns entry is made by the person
providing your dns service, not just local caching.
If you provide your own dns service with djbdns (tinydns) here is a
typical entry from one of my nameservers:
###################################################
## ndhsdns.com djbdns zone
###################################################
Zndhsdns.com:ns1.ndhsdns.com.:postmaster.ndhsdns.com.:2006022001:
&ndhsdns.com::ns1.ndhsdns.com.
&ndhsdns.com::ns2.ndhsdns.com.
@ndhsdns.com:216.221.100.227:mail.ndhsdns.com.:0
+ndhsdns.com:216.221.100.227
=ns1.ndhsdns.com:216.221.100.227
=ns2.ndhsdns.com:216.221.101.82
=www.ndhsdns.com:216.221.100.227
=www2.ndhsdns.com:216.221.101.82
=ftp.ndhsdns.com:216.221.100.227
=ftp2.ndhsdns.com:216.221.101.82
'_domainkey.ndhsdns.com:o=-; [EMAIL PROTECTED]
'private._domainkey.ndhsdns.com:k=rsa; p=MEwwD...[too long for here]
'ndhsdns.com:v=spf1 a mx include\072srt.com ~all
'dsl-100-227.srtnet.com:v=spf1 a -all
'mail.ndhsdns.com:v=spf1 a -all
The txt entries can be made anywhere but I normally place then at the end
just to keep it simple.
Regards,
Nick
I am using djbdns and you have this on your documentation.
If you use djbdns, a typical entry will look like this:
'_domainkey.yourdomain.com:o=-; [EMAIL PROTECTED]
'private._domainkey.yourdomain.com:k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQ
. . .
Where exactly do I put this? Sorry. I am just confused.
Quoting Nick Hemmesch <[EMAIL PROTECTED]>:
hi all,
I see the recent update of qmailtoaster installs domainkeys.
my /etc/tcprules.d/tcp.smtp check for that but I do not have the
keys
generated (stil testing on my development server)
So are there any downsides if I do not have
/var/qmail/control/domainkeys/%/private but it is listed in
/etc/tcprules.d/tcp.smtp
Thanks for the fedback
Vesko Nedev
Hi Vesko,
If there is no private key available the mail is send unsigned. You
will
still check domainkeys on all incoming mail.
When you make your keys and make your dns entry, other servers will
be
able to validate the mail you send.
It is very easy to implement:
http://www.qmailtoaster.com/qt-doc/QT-README.domainkeys
Regards,
Nick
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
_______________________________________________
how soon not now becomes never. --Martin Luther
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
