Cisco Cisco Email Security Appliance C160 Références techniques

Page de 314
 
32
Cisco AsyncOS 9.1 for Email CLI Reference Guide
 
Chapter 3      The Commands: Reference Examples
  Domain Keys
--canon
The canonicalization algorithm to use when signing 
by DK. Currently supported algorithms are 
simple
 
and 
nofws
. Default is 
nofws
.
--body_canon
The body canonicalization algorithm of to use when 
signing by DKIM.  Currently supported algorithms 
are 
simple
 and 
relaxed
. Default is 
simple
.
--header_canon
The headers canonicalization algorithm of to use 
when signing by DKIM.  Currently supported 
algorithms are 
simple
 and 
relaxed
. Default is 
simple
.
--body_length
Number of bytes of canonicalized body that are used 
to calculate the signature.  Is used only in DKIM 
profiles.  If used this value becomes 
l
 tag of the 
signature.  By default it is not used.
--headers_select
Detrmines how to select headers for signing.  Is used 
only in DKIM profiles.  Can be one of 
all
standard
standard_and_custom
all
 means to sign 
all non-repetitive headers.  "standard" means to sign 
pedefined set of well known headers such as Subject, 
From, To, Sender, MIME heades etc. 
standard_and_custom
 means to sign well known 
headers and user-defined set of headers. Default is 
standard
.
--custom_headers
User-defined set of headers to sign. Is used only in 
DKIM profiles if 
headers_select
 is 
standard_and_custom
.  Default is empty set.
--i_tag
Determines whether to include the 
i
 tag into the 
signature. Possible values are 
yes
 or 
no
. Default is 
yes
.
--agent_identity
The identity of the user or agent on behalf of which 
this message is signed. The syntax is a standard 
email address where the local-part may be omitted.  
Domain part of this address should be a sub-domain 
of or equal to the 
<domain>
. This option is only 
applicable if 
--i_tag
 value is set to 
yes
. Default is 
an empty local-part followed by an 
@
 and by the 
<domain>
.
--q_tag
Determines whether to include the 
q
 tag into the 
signature. Possible values are 
yes
 or 
no
. Default is 
yes
.
--t_tag
Determines whether to include the
 t
 tag into the 
signature. Possible values are 
yes
 or 
no
. Default is 
yes
.
--x_tag
Determines whether to include the 
x
 tag into the 
signature. Possible values are 
yes
 or 
no
. Default is 
yes
.
Table 3-2
domainkeysconfig New Signing Profile Arguments
Argument
Description