Cisco Cisco Email Security Appliance C650 Guía Del Usuario
Chapter 5 Email Authentication
5-10
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Note
The From: address in the domain profile must match the address used for the
bounce return address. To ensure these addresses match, you can configure a
return address for the bounce profile (System Administration > Return
Addresses), and then use the same name in the Profile Users list in the domain
profile. For example, you would configure a return address of
MAILER-DAEMON@example.com for the bounce return address, and add
MAILER-DAEMON@example.com as a profile user in the domain profile.
bounce return address. To ensure these addresses match, you can configure a
return address for the bounce profile (System Administration > Return
Addresses), and then use the same name in the Profile Users list in the domain
profile. For example, you would configure a return address of
MAILER-DAEMON@example.com for the bounce return address, and add
MAILER-DAEMON@example.com as a profile user in the domain profile.
Configuring DomainKeys/DKIM Signing (GUI)
The basic workflow for DomainKeys/DKIM signing in AsyncOS is:
Step 1
Create a new or import an existing private key. For information on creating or
importing signing keys, see
importing signing keys, see
Step 2
Create a domain profile and associate the key with the domain profile. For
information on creating a domain profile, see
information on creating a domain profile, see
.
Step 3
Create the DNS text record. For information about creating the DNS text record,
see
see
Step 4
If you have not already done so, enable DomainKeys/DKIM signing on a mail
flow policy for outbound mail (see
flow policy for outbound mail (see
).
Step 5
Optionally, enable DomainKeys/DKIM signing for bounced and delay messages.
For information about enabling signing for bounce and delay messages, see
For information about enabling signing for bounce and delay messages, see
Step 6
Send email. Mail sent from a domain that matches a domain profile will be
DomainKeys/DKIM signed. In addition, bounce or delay messages will be signed
if you configured signing for bounce and delay messages.
DomainKeys/DKIM signed. In addition, bounce or delay messages will be signed
if you configured signing for bounce and delay messages.
Note
If you create both a DomainKey and DKIM profile (and enable signing on a mail
flow policy), AsyncOS signs outgoing messages with both a DomainKeys and
DKIM signature.
flow policy), AsyncOS signs outgoing messages with both a DomainKeys and
DKIM signature.