I'm not sure what you mean by "correct rule". (I'm not a bind expert, yet)
Looks like ns2.sysmo.com.br is your DNS server. I can't a resolution for that name though: # host ns2.sysmo.com.br # (comes up blank) Diego Pivetta wrote: > Ok amigo i have insert this lines on my master domain zone on bind. > > What the correct rule to insert in my bind? > > ----- Original Message ----- From: "Eric "Shubes"" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Wednesday, February 21, 2007 12:33 PM > Subject: Re: [qmailtoaster] Domainkey fail > > >> Diego Pivetta wrote: >>> Domainkey nor run on my server >>> what a problem? >>> >>> >>> Ok my bind >>> >>> _domainkey.sysmo.com.br IN TXT "t=y; o=-" >>> private._domainkey.sysmo.com.br IN TXT "k=rsa; >>> p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMpp+jKYUOr9xixrCV6FtIazIE+EGVv3iLrrWpDtM7R/IPNTFniRFOfHQCwtpWAMVwIDAQAB" >>> >> >> I'm guessing that this bind record is on your caching nameserver. It >> needs >> to be on the authoritative (public) nameserver for the domain. The >> following >> commands should return these TXT records, and they don't. That is >> indicative >> of the failure. >> >> $ dig _domainkey.sysmo.com.br TXT >> >> ; <<>> DiG 9.3.4 <<>> _domainkey.sysmo.com.br TXT >> ;; global options: printcmd >> ;; Got answer: >> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62406 >> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 >> >> ;; QUESTION SECTION: >> ;_domainkey.sysmo.com.br. IN TXT >> >> ;; AUTHORITY SECTION: >> sysmo.com.br. 10800 IN SOA sysmo.com.br. >> postmaster.sysmo.com.br. 2003012903 3600 120 1209600 43200 >> >> ;; Query time: 550 msec >> ;; SERVER: 192.168.70.1#53(192.168.70.1) >> ;; WHEN: Wed Feb 21 08:27:18 2007 >> ;; MSG SIZE rcvd: 88 >> >> $ dig private._domainkey.sysmo.com.br TXT >> >> ; <<>> DiG 9.3.4 <<>> private._domainkey.sysmo.com.br TXT >> ;; global options: printcmd >> ;; Got answer: >> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63332 >> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 >> >> ;; QUESTION SECTION: >> ;private._domainkey.sysmo.com.br. IN TXT >> >> ;; AUTHORITY SECTION: >> sysmo.com.br. 4694 IN SOA sysmo.com.br. >> postmaster.sysmo.com.br. 2003012903 3600 120 1209600 43200 >> >> ;; Query time: 28 msec >> ;; SERVER: 192.168.70.1#53(192.168.70.1) >> ;; WHEN: Wed Feb 21 08:27:54 2007 >> ;; MSG SIZE rcvd: 96 >> >> When you put the TXT records in the *authoritative* (not caching) >> nameserver >> for your domain, 'dig' will return the record, and DK will work. >> >> >>> My tcp.smtp rules >>> >>> 192.168.3.24:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/control/domainkeys/sysmo.com.br/private",DKVERIFY="MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMpp+jKYUOr9xixrCV6FtIazIE+EGVv3iLrrWpDtM7R/IPNTFniRFOfHQCwtpWAMVwIDAQAB",DKQUEUE="/var/qmail/bin/qmail-queue.orig" >>> >> >> This looks ok. >> >>> Domainkey test >>> DomainKey-Status: no key: Caught error looking up key: DNS name not >>> found [response code 3] >>> >> >> -- >> -Eric 'shubes' >> -- -Eric 'shubes' --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
