Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1181
 
21-5
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
 
Chapter 21      Email Authentication
  Configuring DomainKeys and DKIM Signing
A selector (a selector is used to form the query for the public key. In the DNS query type, this value 
is prepended to the “_domainkey.” namespace of the sending domain).
A canonicalization method (the method by which the headers and content are prepared for 
presentation to the signing algorithm). AsyncOS supports both “simple” and “nofws” for 
DomainKeys and “relaxed” and “simple” for DKIM.
A signing key (see 
 for more information).
A list of headers and the body length to sign (DKIM only).
A list of tags you want to include in the signature’s header (DKIM only). These tags store the 
following information:
The identity of the user or agent (e.g., a mailing list manager) on whose behalf the message is 
signed.
A comma-separated list of query methods used to retrieve the public key.
The timestamp of when the signature was created.
The expiration time of the signature, in seconds.
A vertical bar-separated (i.e., 
|
) list of header fields present when the message was signed.
The tags you want to include in the signature (DKIM only).
A list of Profile Users (addresses allowed to use the domain profile for signing).
Note
The domain in the addresses specified in the profile users must match the domain specified in the 
Domain field.
You can search through all of your existing domain profiles for a specific term. See 
 for more information.
You can also choose whether to sign system-generated messages with DKIM signatures. See 
 for more information.
Related Topics
Exporting and Importing Domain Profiles
You can export your existing domain profiles to a text file on the appliance. When you export the domain 
profiles, all of the profiles existing on the appliance are put into a single text file. See 
You can import domain profiles that you have previously exported. Importing domain profiles causes all 
of the current domain profiles on the machine to be replaced. See 
Enabling Signing for Outgoing Mail
DomainKeys and DKIM signing is enabled on mail flow policies for outbound mail. For more 
information, see the “Configuring the Gateway to Receive Mail” chapter.