Cisco Cisco Email Security Appliance X1070 기술 참조
3-36
CLI Reference Guide for AsyncOS 9.6 for Cisco Email Security Appliances
Chapter 3 The Commands: Reference Examples
Domain Keys
Table 3-2
domainkeysconfig New Signing Profile Arguments
Argument
Description
<name>
Name of domain profile.
<type>
Type of domain. Can be
dk
or
dkim
.
<domain>
Domain field of domain profile. This forms the
d
tag
of the Domain-Keys signature.
<selector>
Selector field of domain profile. This forms the
s
tag
of the Domain-Keys signature.
<user-list>
Comma separated list of domain profile users. Users
are used to match against email addresses to
determine if a specific domain profile should be used
to sign an email. Use the special keyword
are used to match against email addresses to
determine if a specific domain profile should be used
to sign an email. Use the special keyword
all
to
match all domain users.
[options]
--key_name
The name of the private key that will be used for
signing.
signing.
--canon
The canonicalization algorithm to use when signing
by DK. Currently supported algorithms are
by DK. Currently supported algorithms are
simple
and
nofws
. Default is
nofws
.
--body_canon
The body canonicalization algorithm of to use when
signing by DKIM. Currently supported algorithms
are
signing by DKIM. Currently supported algorithms
are
simple
and
relaxed
. Default is
simple
.
--header_canon
The headers canonicalization algorithm of to use
when signing by DKIM. Currently supported
algorithms are
when signing by DKIM. Currently supported
algorithms are
simple
and
relaxed
. Default is
simple
.
--body_length
Number of bytes of canonicalized body that are used
to calculate the signature. Is used only in DKIM
profiles. If used this value becomes
to calculate the signature. Is used only in DKIM
profiles. If used this value becomes
l
tag of the
signature. By default it is not used.
--headers_select
Detrmines how to select headers for signing. Is used
only in DKIM profiles. Can be one of
only in DKIM profiles. Can be one of
all
,
standard
,
standard_and_custom
.
all
means to sign
all non-repetitive headers. "standard" means to sign
pedefined set of well known headers such as Subject,
From, To, Sender, MIME heades etc.
pedefined set of well known headers such as Subject,
From, To, Sender, MIME heades etc.
standard_and_custom
means to sign well known
headers and user-defined set of headers. Default is
standard
.
--custom_headers
User-defined set of headers to sign. Is used only in
DKIM profiles if
DKIM profiles if
headers_select
is
standard_and_custom
. Default is empty set.
--i_tag
Determines whether to include the
i
tag into the
signature. Possible values are
yes
or
no
. Default is
yes
.