DKIM

[Faehl, Chris]

You might want to use some basic tools to perform verification of your
record prior to seeing if IronPort can do anything with your record. In
your example, it appears as though you have
roundrock._domainkey.tgslc.org. commented out completely. Remove the
leading semi-colon, update zone serial number, rndc reload tgslc.org,
then verify with dig -t TXT roundrock._domainkey.tgslc.org. 
 

Chris Faehl

Hosting Manager, RightNow Technologies

 

________________________________

From: Santillo, Lucille [mailto:lucille.santillo at tgslc.org] 
Sent: Thursday, June 19, 2008 1:01 PM
To: Faehl, Chris; bind-users at isc.org
Subject: RE: DKIM

 

Chris,

 

This is what we have put in our named.data file for our main site. : 

 

; DKIM (Domain Key Identified Mail) Information

;roundrock._domainkey.tgslc.org.        IN      TXT     "v=DKIM1; p= <in
here is the key>

 

We are testing from a Cisco product called IronPort (spam filter) and
this is what we get. IronPort is outside our proxy firewall. 

 

 

 

 

 

-----Original Message-----
From: Faehl, Chris [mailto:cfaehl at rightnow.com] 
Sent: Thursday, June 19, 2008 1:05 PM
To: Santillo, Lucille; bind-users at isc.org
Subject: RE: DKIM

 

Sure, works fine. It's just a TXT record. How are you trying to verify

if it's "working"? What have you tried?

 

Chris Faehl

Hosting Manager, RightNow Technologies

 

-----Original Message-----

From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On

Behalf Of Santillo, Lucille

Sent: Thursday, June 19, 2008 11:52 AM

To: bind-users at isc.org

Subject: DKIM

 

 

 

 

 

Has anyone successfully configured DKIM with Bind9? Everything we try

doesn't work. We have an application proxy firewall. 

 

 

 

 

 

 

 

Lucille Santillo

 

Information Security Analyst

 

Enterprise Security Services

 

(800) 252-9743 x 4904

 

512-219-4904

 

Fax 512-219-4952

 

lucille.santillo at tgslc.org

 

www.tgslc.org