Public Keys DNS records

  • ronald
  • 12/20/07
  • Offline
Posted: Thu, 2008-07-17 07:31

I noticed a new entry in the bind module - Public key

Is there any documentation available??

I have installed a DomainKeys filter but its not quite working yet. I made the entry in the records manually selector1._domainkey IN TXT "k=rsa; p=MIGfMA0GCS....wIDAQAB; t=y" but my mail is still going to hotmails/live.com junk folder

seems MS is getting more strict in the last months so i need the keys to work.

I followed the documentation @ http://jason.long.name/dkfilter/


Re:Public Keys DNS records

  • velvetpixel
  • 01/10/08
  • Offline
  • Thu, 2008-07-17 09:25

There are lots of things that can make hotmail unhappy.

Have you followed this guide?


Re:Public Keys DNS records

  • ronald
  • 12/20/07
  • Offline
  • Thu, 2008-07-17 09:55

Of course. I haven't had an issue yet until now with my newsletter and my IP is in perfect standing

but live.com is a pain in the neck. Apparently the rules are getting more strict to what is "spammy" gmail doesn't accept 5 links anymore but 4 is okay. yahoo refuses always on the first delivery attempt, but goes through in the end. M$ likes you to buy a "sender score" license of no more then $1000 annual and $400 application fee! f*ck them


Re:Public Keys DNS records

  • sgrayban
  • 06/20/07
  • Online Now
  • Thu, 2008-07-17 12:53

M$ are assholes -- they allow tons of spam to be sent out and do nothing to filter and ban the users, I get shitloads of 419 crap from live.com

M$ wants to play the "Al Capone" way - "we can do anything we want but don't do it to me"


Re:Public Keys DNS records

  • ronald
  • 12/20/07
  • Offline
  • Thu, 2008-07-17 13:56

Ive removed the jason.long dkim keys as they were too old. there is one from last januari but that dont work. stupid tutorials

Any documentation anywhere on the public key entry in the bind module for zone files? It looks like webmin can handle public keys but what ever i fill in, it gives errors as i dont know how to use it.....


Re:Public Keys DNS records

  • Joe
  • 10/23/08
  • Offline
  • Fri, 2008-07-18 14:20

Any documentation anywhere on the public key entry in the bind module for zone files? It looks like webmin can handle public keys but what ever i fill in, it gives errors as i dont know how to use it.....

Those are not relevant to DomainKeys/DKIM. It is for signing zone transfers. Most folks with simple deployments don't need to think much about it. You'd just setup a shared key for zone transfers on your two DNS servers, and not worry about zone-specific signing.

Currently there is no support in Virtualmin or Webmin for DomainKeys. I'm working on a few enhancements to the anti-spam tools in Virtualmin, though, and I'll probably add DomainKeys support at that time. Though, at this point, I'm unaware of any major mail providers that consider not having a DomainKey to be a "spammy" characteristic. Adoption has been much slower than for SPF, because it is so much more complicated to implement...and the tools just aren't very good yet.


Re:Public Keys DNS records

  • deterset
  • 03/14/09
  • Offline
  • Mon, 2009-03-16 05:29

Is this available yet ? I have 2 customers that were using domainkeys in plesk but now I have no way of seting it up ? I'm not sure how to d this by hand ether.


Re:Public Keys DNS records

  • andreychek
  • 01/04/09
  • Offline
  • Mon, 2009-03-16 05:46

Not quite yet, but it's on Joe's todo list ;-)

If you were going to do it manually, I'd recommend looking into DKIM rather than Domain Keys. Both are incredibly similar, but DKIM is the successor of Domain Keys.

But Joe's mentioned recently that he'd like to get that into Virtualmin here at some point! -Eric


Re:Public Keys DNS records

  • andreychek
  • 01/04/09
  • Offline
  • Mon, 2009-03-16 05:47

Actually, someone just posted this a moment ago, for how they got DKIM implemented on their server:

http://www.virtualmin.com/index.php?option=com_fireboard&Itemid=77&func=...


That link doesn't work

  • beat
  • 07/12/08
  • Offline
  • Tue, 2010-03-09 07:42

That link doesn't work anymore and didn't get converted to Drupal-urls.

I need to implement DKIM to make yahoo mail servers happy, is there now a year later an easy way to do so ?


Well, I found the post it was

  • andreychek
  • 01/04/09
  • Offline
  • Tue, 2010-03-09 08:49

Well, I found the post it was referring to, I believe it was this one:

http://www.virtualmin.com/node/6568

The bad news, though, is that the fellow there linked to another site, and that other site is no longer online :-/

I haven't heard anything on the DKIM front, I'll pass your request along to Joe and Jamie to make sure they know you're interested in it.

-Eric