Re: Domainkeys

This is what it looks like for our domain

main._domainkey.fz-borstel.de.   86400   TXT "t=y;
k=rsa; 
p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALXoUPGkWxcRpa6bQacQxF5/3a
q7+8B5
o5ePvSO6vZZ5n8m8/5QfkNwEW2XLbHUsuDC3haJgv9RM/uzws51y/VqCXI/4
asn2nJUi1ysj
zvExThY7pjy6e7cov7gmExZxzQIDAQAB"

This is the syntax for BIND. For tinydns the syntax is
slightly different

BIND
default._domainkey.example.com. IN TXT
"DomainKey"

tinydns
'default._domainkey.example.com.omainKey



It's a good practice to use DomainKeys Policy, but it's not
mandatory.

ht
tp://domainkeys.sourceforge.net/policycheck.html

It would look like this:
_domainkey.example.com. IN TXT "t=y; o=-;"

If you paste the fingerprint to your dns file, be sure not
to insert a line-break accidentally

Hope this helps,

Regards,

Klaus Visser
Forschungszentrum Borstel
Germany

> I noticed that your records have a   (after
"t=y")  I do not see that
> in the surgemail instructions.  Is that what I am
missing?
> 
> >
> > The DomainKey records for lcrcomputer.com are:
> >
> > _domainkey.lcrcomputer.com. 86400 IN    TXT   
"t=y; o=~"
> > default._domainkey.lcrcomputer.com. 86400 IN TXT
"t=y; k=rsa;
> >
p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMcObs+NxtlKTaCEGX9p5CftiX
3zm+w5Ru
> >
6+wkS+0sbJ2Bm+oRk8Z2I6sjSrIXdJs/nHOib8g49eSg1fCUMQT503DCOhS9
tAdO58v7
> > ugb+FtlNUVkaWbBm4wpfeGhSPhBwIDAQAB"
> >
> > Lyle
> >
> > Case Hugo wrote:
> >> How can you test to see if it is working?
> >>
> >>
> >> ----- Original Message ----- From: "Lyle
Giese"
> >> <lylelcrcomputer.info> To:
<surgemail-listnetwinsite.com> Sent:
> >> Monday, May 12, 2008 5:40 PM Subject: Re:
[SurgeMail List]
> >> Domainkeys
> >>
> >>
> >>> In the mail server webadmin, go to Spam
Control.  At the top,
> >>> select the domain you want to get the keys
for.  Then scroll down
> >>> to Alternate Sender Verification and click
on Configure next to
> >>> Create DomainKeys for signing outgoing
messages.  Regenerate only
> >>> if necessary.  But this displays what
needs to be entered into
> >>> your Domain's DNS records.  This posts
your domain's public key
> >>> for Yahoo to read.
> >>>
> >>> Then after posting that info in DNS, come
back to this webadmin
> >>> page and select your domain at the top
again.  Under the above
> >>> line(Create DomainKeys...) there is a
check box 'Sign Outgoing
> >>> Messages', this turns on signing your
outgoing messages. The
> >>> receiving mail server reads the domain key
in the message and does
> >>> some kind of magic compare to the info in
DNS and if the magic
> >>> says OK, they accept the message.  If the
magic says NO, your
> >>> options in DNS proclaim what the receiving
mail server should do. 
> >>> But more than likely they will reject a
message or at least add to
> >>> the spammy score of the message while
doing their content
> >>> filtering.
> >>>
> >>> Lyle
> >>>
> >>> Surgemail Support (Marijn) wrote:
> >>>> I'm passing this on to chris, he
should respond when he returns.
> >>>> Please, let us know if you or someone
else on the list has any
> >>>> further info.
> >>>>
> >>>> Marijn
> >>>>
> >>>>
--------------------------------------------------
> >>>> From: "Glenn Meadows"
<gmeadowssheridansq.com>
> >>>> Sent: Saturday, May 10, 2008 1:26 AM
> >>>> To: <surgemail-listnetwinsite.com>
> >>>> Subject: RE: [SurgeMail List]
Domainkeys
> >>>>
> >>>>> I have significant
"delays" sending mail to Yahoo.  Lots of
> >>>>> "Delivery Deferred"
messages, and was hoping that implementing
> >>>>> Domain Keys, which I believe is
one of Yahoo's preferred
> >>>>> authentication methods, would
eliminate that slowdown.
> >>>>>
> >>>>> We have several large mail lists
for fan clubs, where people
> >>>>> have opted in, that all of the
Yahoo email sits in the outbound
> >>>>> queue for hours, delivery 4-6
every 3-5 minutes.  I think the
> >>>>> issue is when Dlist sends out a
"blast", and there are a flood
> >>>>> of emails going to Yahoo all of a
sudden, THEY tarpit our IP
> >>>>> address.  I've sent them the usual
form letter that you fill out
> >>>>> if you're a corporate mail server,
explaining the situation. 
> >>>>> They've responded that supposedly
it's "fixed", but in addition,
> >>>>> I'd like to do whatever they
suggest to alleviate that
> >>>>> congestion.
> >>>>>
> >>>>>
> >>>>>
> >>>>> Glenn Meadows
> >>>>> Sheridan Square Entertainment
> >>>>> -----Original Message-----
> >>>>> From: Surgemail Support (Marijn)
> >>>>> [mailto:surgemail-supportnetwinsite.com]
> >>>>> Sent: Friday, May 09, 2008 2:33
AM
> >>>>> To: surgemail-listnetwinsite.com
> >>>>> Subject: Re: [SurgeMail List]
Domainkeys
> >>>>>
> >>>>> What is the trouble you are
having, the following page albeit
> >>>>> brief along with the admin
interface page should be all you need
> >>>>> to setup the necessary DNS
records.
> >>>>> h
ttp://netwinsite.com/surgemail/help/domainkeys.htm
> >>>>>
> >>>>> Probably someone else on the list
can be more help as I've never
> >>>>> actually configured domainkeys
myself on a live server. (Chris
> >>>>> is the expert on it here and he is
currently still on holiday)
> >>>>>
> >>>>> Marijn
> >>>>>
> >>>>>
--------------------------------------------------
> >>>>> From: "Glenn Meadows"
<gmeadowssheridansq.com>
> >>>>> Sent: Friday, May 09, 2008 8:19
AM
> >>>>> To: <surgemail-listnetwinsite.com>
> >>>>> Subject: [SurgeMail List]
Domainkeys
> >>>>>
> >>>>>> I'm at a loss at the moment,
to find the "keys" to getting, or
> >>>>>> trying to get Domain Keys
setup.
> >>>>>>
> >>>>>> Can anyone point me in the
right direction, either to online
> >>>>>> step by step instructions?
> >>>>>>
> >>>>>> AND, how well does it HELP in
getting mail delivered to Yahoo?
> >>>>>>
> >>>>>> Thanks.
> >>>>>>
> >>>>>> Glenn Meadows
> >>>>>> Director Media Services/IT
Manager
> >>>>>> Sheridan Square Entertainment
> >>>>>> 210 25th Avenue North
> >>>>>> Suite 1200
> >>>>>> Nashville, TN 37203
> >>>>>> 615-277-1882 (ph)
> >>>>>> 615-277-1801 (fax)
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>
> >
> >
> > 
> 
> 

Thanks.

We do NOT host our public DNS records, they're hosted at our
Registrar, and
I load a duplicate set on our internal DNS Server(s) for
people inside our
network, so I'll give it all a go this weekend, when mail
load for use is
minimal. <smile>.  I'll be here most of the weekend
doing Windows XP Sp3
installs on the inhouse computers. 



Glenn Meadows
Sheridan Square Entertainment
-----Original Message-----
From: Klaus Visser [mailto:kvisserfz-borstel.de] 
Sent: Wednesday, May 14, 2008 11:27 AM
To: surgemail-listnetwinsite.com
Subject: Re: [SurgeMail List] Domainkeys

This is what it looks like for our domain

main._domainkey.fz-borstel.de.   86400   TXT "t=y;
k=rsa; 
p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALXoUPGkWxcRpa6bQacQxF5/3a
q7+8B5
o5ePvSO6vZZ5n8m8/5QfkNwEW2XLbHUsuDC3haJgv9RM/uzws51y/VqCXI/4
asn2nJUi1ysj
zvExThY7pjy6e7cov7gmExZxzQIDAQAB"

This is the syntax for BIND. For tinydns the syntax is
slightly different

BIND
default._domainkey.example.com. IN TXT
"DomainKey"

tinydns
'default._domainkey.example.com.omainKey



It's a good practice to use DomainKeys Policy, but it's not
mandatory.

ht
tp://domainkeys.sourceforge.net/policycheck.html

It would look like this:
_domainkey.example.com. IN TXT "t=y; o=-;"

If you paste the fingerprint to your dns file, be sure not
to insert a
line-break accidentally

Hope this helps,

Regards,

Klaus Visser
Forschungszentrum Borstel
Germany

> I noticed that your records have a   (after
"t=y")  I do not see that 
> in the surgemail instructions.  Is that what I am
missing?
> 
> >
> > The DomainKey records for lcrcomputer.com are:
> >
> > _domainkey.lcrcomputer.com. 86400 IN    TXT   
"t=y; o=~"
> > default._domainkey.lcrcomputer.com. 86400 IN TXT
"t=y; k=rsa; 
> >
p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMcObs+NxtlKTaCEGX9p5CftiX
3zm+w5Ru
> >
6+wkS+0sbJ2Bm+oRk8Z2I6sjSrIXdJs/nHOib8g49eSg1fCUMQT503DCOhS9
tAdO58v7
> > ugb+FtlNUVkaWbBm4wpfeGhSPhBwIDAQAB"
> >
> > Lyle
> >
> > Case Hugo wrote:
> >> How can you test to see if it is working?
> >>
> >>
> >> ----- Original Message ----- From: "Lyle
Giese"
> >> <lylelcrcomputer.info> To:
<surgemail-listnetwinsite.com> Sent:
> >> Monday, May 12, 2008 5:40 PM Subject: Re:
[SurgeMail List] 
> >> Domainkeys
> >>
> >>
> >>> In the mail server webadmin, go to Spam
Control.  At the top, 
> >>> select the domain you want to get the keys
for.  Then scroll down 
> >>> to Alternate Sender Verification and click
on Configure next to 
> >>> Create DomainKeys for signing outgoing
messages.  Regenerate only 
> >>> if necessary.  But this displays what
needs to be entered into 
> >>> your Domain's DNS records.  This posts
your domain's public key 
> >>> for Yahoo to read.
> >>>
> >>> Then after posting that info in DNS, come
back to this webadmin 
> >>> page and select your domain at the top
again.  Under the above 
> >>> line(Create DomainKeys...) there is a
check box 'Sign Outgoing 
> >>> Messages', this turns on signing your
outgoing messages. The 
> >>> receiving mail server reads the domain key
in the message and does 
> >>> some kind of magic compare to the info in
DNS and if the magic 
> >>> says OK, they accept the message.  If the
magic says NO, your 
> >>> options in DNS proclaim what the receiving
mail server should do.
> >>> But more than likely they will reject a
message or at least add to 
> >>> the spammy score of the message while
doing their content 
> >>> filtering.
> >>>
> >>> Lyle
> >>>
> >>> Surgemail Support (Marijn) wrote:
> >>>> I'm passing this on to chris, he
should respond when he returns.
> >>>> Please, let us know if you or someone
else on the list has any 
> >>>> further info.
> >>>>
> >>>> Marijn
> >>>>
> >>>>
--------------------------------------------------
> >>>> From: "Glenn Meadows"
<gmeadowssheridansq.com>
> >>>> Sent: Saturday, May 10, 2008 1:26 AM
> >>>> To: <surgemail-listnetwinsite.com>
> >>>> Subject: RE: [SurgeMail List]
Domainkeys
> >>>>
> >>>>> I have significant
"delays" sending mail to Yahoo.  Lots of 
> >>>>> "Delivery Deferred"
messages, and was hoping that implementing 
> >>>>> Domain Keys, which I believe is
one of Yahoo's preferred 
> >>>>> authentication methods, would
eliminate that slowdown.
> >>>>>
> >>>>> We have several large mail lists
for fan clubs, where people 
> >>>>> have opted in, that all of the
Yahoo email sits in the outbound 
> >>>>> queue for hours, delivery 4-6
every 3-5 minutes.  I think the 
> >>>>> issue is when Dlist sends out a
"blast", and there are a flood 
> >>>>> of emails going to Yahoo all of a
sudden, THEY tarpit our IP 
> >>>>> address.  I've sent them the usual
form letter that you fill out 
> >>>>> if you're a corporate mail server,
explaining the situation.
> >>>>> They've responded that supposedly
it's "fixed", but in addition, 
> >>>>> I'd like to do whatever they
suggest to alleviate that 
> >>>>> congestion.
> >>>>>
> >>>>>
> >>>>>
> >>>>> Glenn Meadows
> >>>>> Sheridan Square Entertainment
> >>>>> -----Original Message-----
> >>>>> From: Surgemail Support (Marijn) 
> >>>>> [mailto:surgemail-supportnetwinsite.com]
> >>>>> Sent: Friday, May 09, 2008 2:33
AM
> >>>>> To: surgemail-listnetwinsite.com
> >>>>> Subject: Re: [SurgeMail List]
Domainkeys
> >>>>>
> >>>>> What is the trouble you are
having, the following page albeit 
> >>>>> brief along with the admin
interface page should be all you need 
> >>>>> to setup the necessary DNS
records.
> >>>>> h
ttp://netwinsite.com/surgemail/help/domainkeys.htm
> >>>>>
> >>>>> Probably someone else on the list
can be more help as I've never 
> >>>>> actually configured domainkeys
myself on a live server. (Chris 
> >>>>> is the expert on it here and he is
currently still on holiday)
> >>>>>
> >>>>> Marijn
> >>>>>
> >>>>>
--------------------------------------------------
> >>>>> From: "Glenn Meadows"
<gmeadowssheridansq.com>
> >>>>> Sent: Friday, May 09, 2008 8:19
AM
> >>>>> To: <surgemail-listnetwinsite.com>
> >>>>> Subject: [SurgeMail List]
Domainkeys
> >>>>>
> >>>>>> I'm at a loss at the moment,
to find the "keys" to getting, or 
> >>>>>> trying to get Domain Keys
setup.
> >>>>>>
> >>>>>> Can anyone point me in the
right direction, either to online 
> >>>>>> step by step instructions?
> >>>>>>
> >>>>>> AND, how well does it HELP in
getting mail delivered to Yahoo?
> >>>>>>
> >>>>>> Thanks.
> >>>>>>
> >>>>>> Glenn Meadows
> >>>>>> Director Media Services/IT
Manager Sheridan Square 
> >>>>>> Entertainment 210 25th Avenue
North Suite 1200 Nashville, TN 
> >>>>>> 37203
> >>>>>> 615-277-1882 (ph)
> >>>>>> 615-277-1801 (fax)
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>
> >
> >
> > 
> 
>