Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

In the Security Features section of the mail flow policy, enable DKIM Verification by selecting On.

Select the DKIM verification profile that you want to use for the policy.

Commit your changes.

Lines such as the following are added to the mail logs upon DKIM verification:

When you verify DKIM mail, an Authentication-Results header is added to the mail, but the mail is 
accepted regardless of the authentication result. To configure actions based on these authentication 
results, you can create a content filter to perform actions on the DKIM-verified mail. For example, if 
DKIM verification fails, you may want configure the mail to be delivered, bounced, dropped, or sent to 
a quarantine. To do this, you must configure an action using a content filter. 

Choose Mail Policies > Incoming Filters. 

Click Add Filter. 

In the Conditions section, click Add Condition. 

Select DKIM Authentication from the list of conditions.

Choose a DKIM condition. Select one of the following options:

Pass. The message passed the authentication tests.

Neutral. Authentication was not performed.

Temperror. A recoverable error occurred.

Permerror. An unrecoverable error occurred.

Hardfail. The authentication tests failed.

None. The message was not signed.

Select an action to associate with the condition. For example, if the DKIM verification fails, you may 
want to notify the recipient and bounce the message. Or, if DKIM verification passes, you may want to 
deliver the message immediately without further processing. 

Submit the new content filter.

Enable the content filter on the appropriate incoming mail policy.

Commit your changes.

mail.current:Mon Aug  6 13:35:38 2007 Info: MID 17 DKIM: no signature

mail.current:Mon Aug  6 15:00:37 2007 Info: MID 18 DKIM: verified pass