Cisco Cisco Email Security Appliance C170 Referências técnicas

Cisco AsyncOS 8.5.5 CLI Reference Guide

Chapter 3 The Commands: Reference Examples

Domain Keys

Batch Command: This command supports a batch format.

Batch Format - Signing Profiles

The batch format of the

domainkeysconfig

command can be used to create, edit, or delete signing

profiles

•

Adding a DomainKeys/DKIM signing profile:

domainkeysconfig profiles signing new <name> <type> <domain>

<selector> <user-list> [options]

Table 3-25

domainkeysconfig New Signing Profile Arguments

Argument

Description

<name>

Name of domain profile.

<type>

Type of domain. Can be

dkim

<domain>

Domain field of domain profile. This forms the

tag

of the Domain-Keys signature.

<selector>

Selector field of domain profile. This forms the

tag

of the Domain-Keys signature.

<user-list>

Comma separated list of domain profile users. Users
are used to match against email addresses to
determine if a specific domain profile should be used
to sign an email. Use the special keyword

all

match all domain users.

[options]

--key_name

The name of the private key that will be used for
signing.

--canon

The canonicalization algorithm to use when signing
by DK. Currently supported algorithms are

simple

and

nofws

. Default is

nofws

--body_canon

The body canonicalization algorithm of to use when
signing by DKIM. Currently supported algorithms
are

simple

and

relaxed

. Default is

simple

--header_canon

The headers canonicalization algorithm of to use
when signing by DKIM. Currently supported
algorithms are

simple

and

relaxed

. Default is

simple

--body_length

Number of bytes of canonicalized body that are used
to calculate the signature. Is used only in DKIM
profiles. If used this value becomes

tag of the

signature. By default it is not used.