Cisco Cisco Email Security Appliance X1070 기술 참조

다운로드
페이지 324
 
3-36
CLI Reference Guide for AsyncOS 9.6 for Cisco Email Security Appliances
 
Chapter 3      The Commands: Reference Examples
  Domain Keys
Table 3-2
domainkeysconfig New Signing Profile Arguments
Argument
Description
<name>
Name of domain profile.
<type>
Type of domain.  Can be 
dk
 or 
dkim
.
<domain>
Domain field of domain profile.  This forms the 
d
 tag 
of the Domain-Keys signature.
<selector>
Selector field of domain profile.  This forms the 
s
 tag 
of the Domain-Keys signature.
<user-list>
Comma separated list of domain profile users.  Users 
are used to match against email addresses to 
determine if a specific domain profile should be used 
to sign an email. Use the special keyword 
all
 to 
match all domain users.
[options]
--key_name
The name of the private key that will be used for 
signing.
--canon
The canonicalization algorithm to use when signing 
by DK. Currently supported algorithms are 
simple
 
and 
nofws
. Default is 
nofws
.
--body_canon
The body canonicalization algorithm of to use when 
signing by DKIM.  Currently supported algorithms 
are 
simple
 and 
relaxed
. Default is 
simple
.
--header_canon
The headers canonicalization algorithm of to use 
when signing by DKIM.  Currently supported 
algorithms are 
simple
 and 
relaxed
. Default is 
simple
.
--body_length
Number of bytes of canonicalized body that are used 
to calculate the signature.  Is used only in DKIM 
profiles.  If used this value becomes 
l
 tag of the 
signature.  By default it is not used.
--headers_select
Detrmines how to select headers for signing.  Is used 
only in DKIM profiles.  Can be one of 
all
standard
standard_and_custom
all
 means to sign 
all non-repetitive headers.  "standard" means to sign 
pedefined set of well known headers such as Subject, 
From, To, Sender, MIME heades etc. 
standard_and_custom
 means to sign well known 
headers and user-defined set of headers. Default is 
standard
.
--custom_headers
User-defined set of headers to sign. Is used only in 
DKIM profiles if 
headers_select
 is 
standard_and_custom
.  Default is empty set.
--i_tag
Determines whether to include the 
i
 tag into the 
signature. Possible values are 
yes
 or 
no
. Default is 
yes
.