Cisco Cisco Email Security Appliance X1050 ユーザーガイド
19-6
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 19 Email Authentication
Configuring DomainKeys and DKIM Signing
Step 3
Submit and commit your changes.
Enabling Signing for Bounce and Delay Messages
In addition to signing outbound messages, you may want to sign bounce and delay messages. You may
want to do this to alert recipients that the bounce and delay messages they receive from your company
are legitimate. To enable DomainKeys and DKIM signing for bounce and delay messages, you enable
DomainKeys/DKIM signing for the bounce profile associated with the public listener.
want to do this to alert recipients that the bounce and delay messages they receive from your company
are legitimate. To enable DomainKeys and DKIM signing for bounce and delay messages, you enable
DomainKeys/DKIM signing for the bounce profile associated with the public listener.
Procedure
Step 1
On the bounce profile associated with the public listener where you will send signed outbound messages,
go to Hard Bounce and Delay Warning Messages.
go to Hard Bounce and Delay Warning Messages.
Step 2
Enable “Use Domain Key Signing for Bounce and Delay Messages”:
Note
to sign bounced and delay messages.
Note
The From: address in the domain profile must match the address used for the bounce return address. To
ensure these addresses match, you can configure a return address for the bounce profile (System
Administration > Return Addresses), and then use the same name in the Profile Users list in the domain
profile. For example, you would configure a return address of MAILER-DAEMON@example.com for
the bounce return address, and add MAILER-DAEMON@example.com as a profile user in the domain
profile.
ensure these addresses match, you can configure a return address for the bounce profile (System
Administration > Return Addresses), and then use the same name in the Profile Users list in the domain
profile. For example, you would configure a return address of MAILER-DAEMON@example.com for
the bounce return address, and add MAILER-DAEMON@example.com as a profile user in the domain
profile.
Configuring DomainKeys/DKIM Signing (GUI)
Procedure
Step 1
Create a new or import an existing private key. For information on creating or importing signing keys,
see
see
.
Step 2
Create a domain profile and associate the key with the domain profile. For information on creating a
domain profile, see
domain profile, see
.
Step 3
Create the DNS text record. For information about creating the DNS text record, see
Step 4
If you have not already done so, enable DomainKeys/DKIM signing on a mail flow policy for outbound
mail (see
mail (see
Step 5
Optionally, enable DomainKeys/DKIM signing for bounced and delay messages. For information about
enabling signing for bounce and delay messages, see
enabling signing for bounce and delay messages, see
.