Cisco Cisco Email Security Appliance X1070 Betriebsanweisung
21-5
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 21 Email Authentication
Configuring DomainKeys and DKIM Signing
•
A selector (a selector is used to form the query for the public key. In the DNS query type, this value
is prepended to the “_domainkey.” namespace of the sending domain).
is prepended to the “_domainkey.” namespace of the sending domain).
•
A canonicalization method (the method by which the headers and content are prepared for
presentation to the signing algorithm). AsyncOS supports both “simple” and “nofws” for
DomainKeys and “relaxed” and “simple” for DKIM.
presentation to the signing algorithm). AsyncOS supports both “simple” and “nofws” for
DomainKeys and “relaxed” and “simple” for DKIM.
•
A signing key (see
for more information).
•
A list of headers and the body length to sign (DKIM only).
•
A list of tags you want to include in the signature’s header (DKIM only). These tags store the
following information:
following information:
–
The identity of the user or agent (e.g., a mailing list manager) on whose behalf the message is
signed.
signed.
–
A comma-separated list of query methods used to retrieve the public key.
–
The timestamp of when the signature was created.
–
The expiration time of the signature, in seconds.
–
A vertical bar-separated (i.e.,
|
) list of header fields present when the message was signed.
•
The tags you want to include in the signature (DKIM only).
•
A list of Profile Users (addresses allowed to use the domain profile for signing).
Note
The domain in the addresses specified in the profile users must match the domain specified in the
Domain field.
Domain field.
You can search through all of your existing domain profiles for a specific term. See
for more information.
You can also choose whether to sign system-generated messages with DKIM signatures. See
for more information.
Related Topics
•
Exporting and Importing Domain Profiles
You can export your existing domain profiles to a text file on the appliance. When you export the domain
profiles, all of the profiles existing on the appliance are put into a single text file. See
profiles, all of the profiles existing on the appliance are put into a single text file. See
You can import domain profiles that you have previously exported. Importing domain profiles causes all
of the current domain profiles on the machine to be replaced. See
of the current domain profiles on the machine to be replaced. See
Enabling Signing for Outgoing Mail
DomainKeys and DKIM signing is enabled on mail flow policies for outbound mail. For more
information, see the “Configuring the Gateway to Receive Mail” chapter.
information, see the “Configuring the Gateway to Receive Mail” chapter.