Configuring DKIM signing in MDaemon Rumi, March 25, 2013March 25, 2013 DomainKeys Identified Mail (DKIM) is an open protocol for protecting email users against email address identity theft and email message content tampering. It does this by providing positive identification of the signer’s identity along with an encrypted “hash” of the message content. To configure and use DKIM: The system administrator creates a private/public key pair for the server and publishes the public key in the domain’s domain name server. Using the private key, the sending server creates a signature for each outgoing message. The resulting signature data is stored in a “DKIM-Signature” header within the message. The receiving server obtains the signature from the “DKIM-Signature” header and verifies it using the signer’s public key. Procedure To configure and use DKIM in MDaemon: Open the Security menu from the MDaemon interface Select SPF & SenderID / DomainKeys & DKIM / HashCash… Select the DK & DKIM (signing) tab Enable Sign outgoing messages with DomainKeys Identified Mail (DKIM) Click the Create new public and private keys to have MDaemon generate the public key your DNS server needs for DKIM checks and the private one that MDaemon uses. (If you have done this already for DomainKeys you will want to skip this step) A confirmation window will appear, click yes to continue. After MDaemon creates the key pair, the readme will display on screen showing the public keys that need to be entered into your DNS server. It is also saved to \MDaemon\Pem\MDaemon\dns_readme.txt Enter this public key from the readme into your DNS server as a TXT record. The instructions on how to edit your DNS records will vary based on what DNS software you are using. Do NOT use the DKIM ssp record for DNS section of the file. Use the example information below as a template for creating your DNS entries. The DKIM standard has changed, and MDaemon 9.x and below generates outdated examples using SSP (Sender Signing Practices) rather than ADSP (Author Domain Signing Practices). There are different ways to set up your DNS record depending on how strict you want the DKIM policy for your domain to be. DKIM Legend (you can use these signing policies with DKIM): dkim=unknown – The domain might sign some or all email dkim=all – All mail from the domain is signed dkim=discardable – All mail from the domain is signed and receivers are encouraged to discard unsigned mail Example DNS data for policy using DKIM: If all outbound mail for domain.com is signed: _adsp._domainkey.domain.com. IN TXT 'dkim=all' If all outbound mail for domain.com is signed and unsigned mail should be discarded: _adsp._domainkey.domain.com. IN TXT 'dkim=discardable' If some outbound mail for domain.com might not be signed: _adsp._domainkey.domain.com. IN TXT 'dkim=unknown' Src: http://www.altn.com/Support/KnowledgeBase/KnowledgeBaseResults/?Number=KBA-01744 Related Administrations Configurations (Windows) DKIMMDaemon
1:1 NAT firewall using pfsense October 19, 2015October 19, 2015 Assuming you are planning to setup your server infrastructure behind firewall- pfsense. You have a Public IP- 114.130.56.x to be pointed to your private lan server with 192.168.14.x. Let’s begin- Step-1 Adding public IP to the WAN interface “Firewall > Virtual IPs ” as below- Step-2 Now move on the… Read More
Clone KVM-based Virtual Machines on Redhat / CentOS Linux February 24, 2020 Prerequisite: Operating System and Software Versions Operating System: – Redhat 7.3 Software: – libvirtd (libvirt) 2.0.0 Obtain Source Virtual Machine’s information Before we begin cloning any virtual machine we first need to obtain some basic information about it. The absolute minimum information required about the source virtual machine we are… Read More
Mrtg: example cfg for memory, cpu, disk etc. September 5, 2011 CPU Usage /etc/mrtg/cpu.cfg WorkDir: /var/www/mrtg LoadMIBs: /usr/share/snmp/mibs/UCD-SNMP-MIB.txt Target[localhost.cpu]:ssCpuRawUser.0&ssCpuRawUser.0:public@127.0.0.1+ ssCpuRawSystem.0&ssCpuRawSystem.0:public@127.0.0.1+ ssCpuRawNice.0&ssCpuRawNice.0:public@127.0.0.1 RouterUptime[localhost.cpu]: public@127.0.0.1 MaxBytes[localhost.cpu]: 100 Title[localhost.cpu]: CPU Load PageTop[localhost.cpu]: Active CPU Load % Unscaled[localhost.cpu]: ymwd ShortLegend[localhost.cpu]: % YLegend[localhost.cpu]: CPU Utilization Legend1[localhost.cpu]: Active CPU in % (Load) Legend2[localhost.cpu]: Legend3[localhost.cpu]: Legend4[localhost.cpu]: LegendI[localhost.cpu]: Active LegendO[localhost.cpu]: Options[localhost.cpu]: growright,nopercent Memory Usage /etc/mrtg/mem.cfg LoadMIBs: /usr/share/snmp/mibs/HOST-RESOURCES-MIB.txt Target[localhost.mem]: .1.3.6.1.4.1.2021.4.6.0&.1.3.6.1.4.1.2021.4.6.0:public@localhost… Read More