Adi Nugroho wrote:
Thank you for all your help for my SPF.
It is working nice now.
Let me ask again about domainkey.
I have follow http://wiki.qmailtoaster.com/index.php/Domainkeys
but my server is NOT signing my mails.
here is what I have done:
1. Create the domainkey
# cd /var/qmail/control/domainkeys
# mkdir internux.co.id
# cd internux.co.id
# dknewkey private > public.txt
# chmod 440 private
# cd ..
# chown -R root:vchkpw internux.co.id
2. Set the DNS
_domainkey.internux.co.id. 86400 IN TXT "o=-"
private._domainkey.internux.co.id. 86400 IN TXT "k=rsa\;
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMtwosDp9r/PCLm+S+jPl76DigwHOCTFjXBHXal5FdqJLQp9X1OmOU/3YWeNr2p2jQIDAQAB"
3. set tcprules:
202.62.:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/control/domainkeys/%/private",NOP0FCHECK="1"
4. restart qmail
/etc/init.d/qmail cdb
/etc/init.d/qmail stop
/etc/init.d/qmail start
In step 3, are you meaning to restrict which messages are signed? This
would only sign messages that were submitted from clients on the 202.62.
subnet. I would typeically add the DKSIGN variable to the first
(localhost) and last entries in tcp.smtp.
--
-Eric 'shubes'
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
