Title: Domainkey on bind

Hi Marco,

 

It may be the DNS server cache your result and give you error:

 

Here is what I have in bind: (primary and slave --- ns1.example.com and ns2.example.com)

 

_domainkey.example.com. IN TXT "t=y; o=-";
default._domainkey.example.com. IN TXT "very long"

 

 

You go http://domainkeys.sourceforge.net/policycheck.html and try ‘example.com’ it will give you something like:

 

Tag

Value

Explanation

o

-

Domain signs *ALL* email

t

y

Domain is in test mode

 

If not, you can wait…. Say tomorrow tries again.

 

I follow the ‘EZ-QmailToaster-Install.txt’ to use djbdns on the qmailtoaster mail server but I don’t think it matters.

 

Any public mail server will go check the domainkey on ‘ns1.example.com’ or ‘ns2.example.com’

 

I have similar problem like you before, try it again later and it works on me.

Your bind TXT record looks good on me.

 

Hope this help you.

 

Thanks,

Philip

 


From: Marco Cordeiro [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 13, 2006 10:24 AM
To: [email protected]
Subject: FW: [qmailtoaster] Domainkey on bind

 

 

I try but always I get : (from http://domainkeys.sourceforge.net/selectorcheck.html )

 

Testing kmtconsult.com.br

 

No _domainkey TXT record found for kmtconsult.com.br

 

my bind config ... the last one ;-)) I try many ... (linux centos 4.3)

 

        IN      TXT     "Kmt Consult ltda."
        IN      TXT     "adm. contact: Marco Cordeiro <[EMAIL PROTECTED]>"

 

_domainkey.kmtconsult.com.br. IN TXT "t=y; o=-";
default._domainkey.kmtconsult.com.br. IN TXT "k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAKUIqEzkzMAsxEBe+yRLWXPvW8tf2SZMQehl2
LL6pVxFd963vAI0SruXC3c7hwFUDQIDAQAB"

 

;SPF rule
kmtconsult.com.br.       IN TXT "v=spf1 mx ptr mx:mx1.kmtconsult.com.br mx:ns1.kmtconsult.com.br"
ns1.kmtconsult.com.br.   IN TXT "v=spf1 a -all"
mx1.kmtconsult.com.br.   IN TXT "v=spf1 a -all"

 

 

 

 


From: Philip Moy [mailto:[EMAIL PROTECTED]
Sent: Monday, June 12, 2006 7:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [qmailtoaster] Domainkey on bind

You can try adding 1 more TXT record:

 

_domainkey.yourdomain.com.            IN         TXT      "t=y; o=-"

 

http://domainkeys.sourceforge.net/policycheck.html

 

 

http://domainkeys.sourceforge.net/selectorcheck.html to check your domain key is valid on DNS server or not.

 

I have these 2 TXT record on the DNS server and it seems working on me.

Hope this help

 

Thanks,

Philip

 

 


From: Marco Cordeiro [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 12, 2006 5:52 PM
To: [email protected]
Subject: RE: [qmailtoaster] Domainkey on bind

 

looking on my headers , domainkeys seems to be working on toaster but not on my dns server (bind) ...

Return-Path: <[EMAIL PROTECTED]>

Delivered-To: [EMAIL PROTECTED]

Received: (qmail 8330 invoked by uid 89); 12 Jun 2006 21:40:18 -0000

DomainKey-Status: bad

Received: by simscan 1.2.0 ppid: 8323, pid: 8325, t: 1.6710s

scanners: attach: 1.2.0 clamav: 0.88.2/m:38/d:1428 spam: 3.1.3

X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on

ns1.kmtconsult.com.br

X-Spam-Level:

X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,HTML_MESSAGE

autolearn=ham version=3.1.3

Received: from unknown (HELO ns1.qmailtoaster.com) (38.99.66.144)

by ns1.kmtconsult.com.br with (DHE-RSA-AES256-SHA encrypted) SMTP; 12 Jun 2006 21:40:16 -0000

Received-SPF: pass (ns1.kmtconsult.com.br: SPF record at qmailtoaster.com designates 38.99.66.144 as permitted sender)

Received: (qmail 14617 invoked by uid 89); 12 Jun 2006 21:39:52 -0000

Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm

Precedence: bulk

List-Post: <mailto:[email protected]>

List-Help: <mailto:[EMAIL PROTECTED]>

List-Unsubscribe: <mailto:[EMAIL PROTECTED]>

List-Subscribe: <mailto:[EMAIL PROTECTED]>

Reply-To: [email protected]

Delivered-To: mailing list [email protected]

Received: (qmail 14611 invoked by uid 89); 12 Jun 2006 21:39:52 -0000

Received-SPF: pass (ns1.qmailtoaster.com: SPF record at kmtconsult.com.br designates 200.152.107.135 as permitted sender)

Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=private; d=kmtconsult.com.br;

b=h109RKR098DTFO/YX31BSwTfQwwG9P69+UP+Tc+GAZ6Le8DBrtfrQxAxEnaMD3C5 ;

From: "Marco Cordeiro" <[EMAIL PROTECTED]>

To: <[email protected]>

Date: Mon, 12 Jun 2006 18:39:31 -0300

Message-ID: <[EMAIL PROTECTED]>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_002A_01C68E4F.8DF78F90"

X-Mailer: Microsoft Office Outlook 11

Thread-Index: AcaOaLBJBxEA7jFLTvC6a/mjV87z0w==

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2663

Subject: [qmailtoaster] Domainkey on bind

 


From: Marco Cordeiro [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 12, 2006 6:40 PM
To: [email protected]
Subject: [qmailtoaster] Domainkey on bind

 

Hi all , I just upgrade my system and everything is fine .
Now I'm trying to setup my domainkey (cnt40) but bind still not show domainkey TXT record …

My bind :
private._domainkey       IN TXT "k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAKUIqEzkzMAsxEBe+yRLWXPvW8tf2SZMQehl2LL6pVxFd963vAI0SruXC3c7

hwFUDQIDAQAB"

From nslookup :
Searching for kmtconsult.com.br TXT record at ns1.kmtconsult.com.br. [200.152.107.135]: Reports "v=spf1 mx ptr mx:mx1.kmtconsult.com.br mx:ns1.kmtconsult.com.br" [took 1333 ms]

Just SPF no domainkey …. Any idea ???

[]'s
Marco Cordeiro

Reply via email to