Ok amigo i have insert this lines on my master domain zone on bind.
What the correct rule to insert in my bind?
----- Original Message -----
From: "Eric "Shubes"" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Wednesday, February 21, 2007 12:33 PM
Subject: Re: [qmailtoaster] Domainkey fail
Diego Pivetta wrote:
Domainkey nor run on my server
what a problem?
Ok my bind
_domainkey.sysmo.com.br IN TXT "t=y; o=-"
private._domainkey.sysmo.com.br IN TXT "k=rsa;
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMpp+jKYUOr9xixrCV6FtIazIE+EGVv3iLrrWpDtM7R/IPNTFniRFOfHQCwtpWAMVwIDAQAB"
I'm guessing that this bind record is on your caching nameserver. It needs
to be on the authoritative (public) nameserver for the domain. The
following
commands should return these TXT records, and they don't. That is
indicative
of the failure.
$ dig _domainkey.sysmo.com.br TXT
; <<>> DiG 9.3.4 <<>> _domainkey.sysmo.com.br TXT
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62406
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;_domainkey.sysmo.com.br. IN TXT
;; AUTHORITY SECTION:
sysmo.com.br. 10800 IN SOA sysmo.com.br.
postmaster.sysmo.com.br. 2003012903 3600 120 1209600 43200
;; Query time: 550 msec
;; SERVER: 192.168.70.1#53(192.168.70.1)
;; WHEN: Wed Feb 21 08:27:18 2007
;; MSG SIZE rcvd: 88
$ dig private._domainkey.sysmo.com.br TXT
; <<>> DiG 9.3.4 <<>> private._domainkey.sysmo.com.br TXT
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63332
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;private._domainkey.sysmo.com.br. IN TXT
;; AUTHORITY SECTION:
sysmo.com.br. 4694 IN SOA sysmo.com.br.
postmaster.sysmo.com.br. 2003012903 3600 120 1209600 43200
;; Query time: 28 msec
;; SERVER: 192.168.70.1#53(192.168.70.1)
;; WHEN: Wed Feb 21 08:27:54 2007
;; MSG SIZE rcvd: 96
When you put the TXT records in the *authoritative* (not caching)
nameserver
for your domain, 'dig' will return the record, and DK will work.
My tcp.smtp rules
192.168.3.24:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/control/domainkeys/sysmo.com.br/private",DKVERIFY="MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMpp+jKYUOr9xixrCV6FtIazIE+EGVv3iLrrWpDtM7R/IPNTFniRFOfHQCwtpWAMVwIDAQAB",DKQUEUE="/var/qmail/bin/qmail-queue.orig"
This looks ok.
Domainkey test
DomainKey-Status: no key: Caught error looking up key: DNS name not
found [response code 3]
--
-Eric 'shubes'
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.18.3/694 - Release Date: 20/2/2007
13:44
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
