Smart Hosts & DNS records

Hi All.
I hope someone could assist me as I have been struggling with mail flow issues for a long time.
We have our own in house exchange server and internal mail as well as incoming mail is 100 %.
We have always used our ISP smart host to send email and started getting email flow issues a couple of months ago.
I then switched over to sending email via DNS. I setup the correct DNS records eg Reverse Lookup record and SPF records as i thought this might be an issue. I have also cleared our domain off one or 2 blacklists. (We had a user account compramised and spammers
were using that account to send email)
This is now all cleared up and general outbound email flow is going great, but once again we are now experiencing issues with all clients filtering with Mail Marshall.. Message as below:
Your message did not reach some or all of the intended recipients.
Subject: Email
Sent: 2014/09/16 09:02 AM
The following recipient(s) cannot be reached:
[email protected] on 2014/09/16 09:02 AM
There was a SMTP communication problem with the recipient's email server.
Please contact your system administrator.
<example.example.org.za #5.5.0 smtp;550 Message refused by MailMarshal SpamProfiler>
Has anyone got any advice on what I can do. The failed report doesnt give much help. I have also sent an email with just text to see if maybe its the email signature but still
no luck.
I'm thinking of switching back to the ISP as a smart host but I'm not sure if the SPF and reverse DNS records would cause an issue now.
Would our clients not look at the reverse and SPF record and see that the IP (ISP Smarthost) doesn't match our IP lised in the public DNS ?
Much Appreciated.
Shaun

Hi.
I contacted the support for Mail Marshal and they got back to me and sorted out the issue. It seems fine for now.. They were really helpful I must say.
The response from them for anyone else with the same issue perhaps.
Regards,
Shaun
Hi Shaun,
It is not a blacklist exactly. SpamProfiler is run on a fingerprint (or pattern) basis. It scans the content of the email message and then acts accordingly to the fingerprints it finds. Due to emails containing your
email domain being submitted as spam and/or mails you sent hitting honey pots, the fingerprint of your domain was flagged as a spam URL. Hence the recommendation to audit your mailing lists. So it was the pattern of the domain that was in the system. Unfortunately
that is not something you can check on MX Toolbox, as Cloudmark (the company that provides the fingerprints for SpamProfiler) does not make their fingerprints publically available

Similar Messages

DNS Host(A) records disappear after a while

Hi all,
a few weeks ago we started to change the TCP/IP configuration of our printers from "static" to DHCP with reservations. The DHCP server is configured to register forward Host(A) and reverse PTR record on DNS on behalf of (all) clients, both are W2K3 with SP2.
This works well for all our Toshiba printers/copiers and most of our HP printers. However, on a handful of HP printers the Host(A) record in the DNS zone get lost / disappeard after some time, leading into a non working name resolution. But only the Host(A) record, the reverse PTR record is still there. Currently we have this issue with Business InkJet 2800 attached via a JetDirect J3258G to our network.
In the past we noticed, that on another printer the Host(A) record re-appears after some hours, only to disappear after a while again. These intervals last some hours up to one day, but seem to follow no period or schedule, like DHCP lease time, DNS scavening etc.
I have intentionally not "listed" all the technical details in this first post. However, if you need specific details I will be happy to share them.
Any hint or comment is appreciated
regards

This is by design.
http://social.technet.microsoft.com/Forums/windowsserver/en-US/afd3c338-1706-4898-b269-550c018073c0/dns-entry-for-dc-not-dynamically-updating-server-2008-r2?forum=winserverDS
http://social.technet.microsoft.com/Forums/windowsserver/en-US/ed97a286-d884-43d6-87e2-5cd5e59cfe9a/windows-2008-r2-domain-controllers-and-static-dns-entries?forum=winserverNIS
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

What are the right DNS records to host more than one site on OSX Server (ML). My conf in Server.app looks right but one of my sites lands on the default server. Any suggestion?

I started using OSX Server on Mountain Lion a few days ago and it looks promising.
I do however measure my ignorance in DNS matters...
I defined two websites in addition to the the Default Server, so I have three names to deal with.
For argument's sake
- www.main.com is the default site
- www.sitea.com is the first site
- www.siteb.com is the second site
I define a virtual host for www.sitea.com and another for www.siteb.com
The resulting apache conf is what I would expect, I am pretty sure it is correct.
So I modified my DNS entries (they were A records) to point to my new OSX Server.
My result is:
- www.main.com shows the default site
- www.sitea.com shows the first site
- www.siteb.com shows...the default site
Any ideas?
Cheers

Thanks MrHoffman!
My problem ended up being a name but not in the DNS!...In Apache.
Your information allowed me to rule out possibilities and zoom in to the culprit faster.
I just report here the conclusion hoping it can help someone else.
When I installed OSX Server last week, I had in mind to principally run siteb.
During the initial install, this is what I must have entered and then forgot about it.
Then I defined my virtual hosts sitea and siteb and realised my machine was called siteb and changed its name to main to avaid a name collision. At which time I remember OSX Server telling me that changing the name could have consequences...But it apparently went ok, and it did except for one little thing.
The consequence was this:
in the main configuration file /Library/Server/Web/Config/apache2/http_server_app.conf the ServerName directive had remained siteb (instead of main). I manually updated it with TextEdit (could do vi from bash, its the same) and replaced siteb with main.
There is a way to detect it.
In Server.app, there is a "logs" panel, which displays all sorts of logs for everything including the websites.
Each website's logs are presented as "access" and "error" logs. The information was there, but I could not see it because the viewing window in remarkably small for so much information in raw text...
web logs are actually written to only two files in /var/log/apache2 (error.log and access.log)
I openned two bash windows and run tail -f on error.log in one and tail -f access.log in the other.
When I started the web service, apache threw a warning stating from mod_ssl saying that the certificate did not match the serve name...I the certificate was what I expected, I checked http_server_app.conf and found the ServerName directive that was not changed when I renamed my server...
Easily fixed when its found, but it can take a while to find.
BTW, I was using A DNS records for and it works, but I find your method of using CNAME records documents the administrator's intent better than with A records; I started to do the same. (A records a useful though, they can run a domain across multiple machines)
Cheers mate!

Exchange 2013 will not send out email using MX records, but will via smart host.

When I use a smart host my email goes out fine, but when I use MX look-up it does not.
Inbound mail works when I use Telnet to test it.
Could this be because I'm testing the server from our office that the FQDN on the Exchange Server will not resolve back to the IP address I'm testing from?

Yes almost certainly.
If when the server does the MX lookup for the destination address it resolves to your external IP address then it's quite likely that it won't be able to send. A lot of firewalls can't handle having a connection made from the internal network for an external
IP address that it controls, and won't simply pass the connection back to the internal network. When using the smart host though, the destination is external so the message can reach it and then when the smart host tries to deliver the message to your external
IP it's coming from an external source so it works.
Tricky one to explain but I hope that makes sense.

SPF and smart host

Hi
Question relates to SBS 2011 Std, with outgoing email configured via smart host (mail.btconnect.com)
I've been asked to add an SPF record for the customers domain (customer.co.uk)
Do I need an SPF if using a smart host ? And if so, does it just need to refer to the smart hosts domain name / IP address ?
Thanks

Hi,
I agree with HILogics , If you are using DNS or Smarthost Sender Policy Framework (SPF) is very much required as it
helps to protect user e-mail addresses from forgery and misuse.
Binu Kumar - MCP, MCITP, MCTS , MBA - IT , Director Aarbin Technology Pvt Ltd - Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Externally Hosted DNS - How do I set up my 2003 DNS server for sub domain to point to internal IP address??

I have a domain name(domain.com) DNS hosted at my ISP. I also have 3 sub domains DNS hosted at the same ISP pointing to various external ip addresses (mail.domain.com, vpn.domain.com and ts.domain.com). We want to set up sales.domain.com to point to an
internal 10. IP address. We have AD integrated DNS servers for our 2003 AD domain. The AD domain name is totally different than the hosted domain name in question. I currently edit the host file for a couple of PC's but this isnt practical company wide so
I want to add entries on our internal AD DNS servers to resolve the locally hosted site. If i recall, someone once told me that you cannot just put an A record for one sub domain, I would have to have entries on my 2003 DNS server to resolve anything related
to the domain.com name. Is this accurate? If so, what is the proper way to configure my 2003 AD DNS server to resolve anything domain.com related for my internal users while still allowing my ISP to do the DNS lookup for the internet.

On my 2003 AD integrated DNS server...i rightclick forward lookup zone and choose...new zone..primary zone (store zone in AD checkbox checked)..i chose to all DNS servers in the AD domain for replication...zone name sales.domain.com....allow secure updates
option....then i added an A record in that zone...sales.domain.com..pointed that towards my internal 10. IP address...is this correct? It seems to be working correctly for the sales.domain.com DNS record...and i tested the other sub domains...and those look
like they are going to my ISP for DNS resolution...
Is this the correct procedure? I did this on a test AD domain and not my production...i want to make sure i dont break everything under the domain.com by incorrectly adding 1 sub domain..

How do I create a DNS record on my Mac Server?

How do I create a DNS record on my Mac Server?

The following is info that I found in another post that I have been trying to follow.
MrHoffman New England
Re: Configure DNS - OS X Server Next Steps
Feb 13, 2011 6:36 AM (in response to Jimbooooooo)
You're setting up internal DNS services, you referenced your ISP DNS servers and you should not have, and now those servers have no translations for your hosts. This is a common misconfiguration.
See [configuring DNS on Mac OS X Server|http://labs.hoffmanlabs.com/node/1436] for how to set up your internal DNS server.
And if there are any references to your ISP DNS servers here (within your client settings, within your server settings, your Airport settings, etc), then you're usually going to have DNS and connectivity problems. You're running a server now, so you'll be running your own services, and (particularly because of NAT here) referencing only your own DNS server(s).
You may be setting up external DNS (if and when you need that), but that should happen after you set up your internal DNS. The above article has a link to setting up external DNS, when you get around to that, if/when you need in-bound connections into your LAN.

How to create a DNS record for a domain itself (without a hostname)

Hi,
Normally, you can create a DNS record that points to the zone itself, e.g.:
@ 10800 IN A 196.197.200.201
How do you accomplish that on a Mac OSX Lion Server? The DNS requires you to enter a hostname and it does not accept "@" as the hostname as it normally appears in the zone file.
(manually modifying the host file does not work - I tried that ;-) )
Any help is appreciated
Thanks
Bjoern Dirchsen

Create either a blank record with a ., or a FQDN such as 'domain.com.' (note the trailing dot). Either of these should map to the domain name.

How do I setup a DNS record to point to an internal IP with a port.

I am trying to setup a DNS entry on my AD server to point to a web sever that I have setup to run certain services. All of these services run through IIS on port 82 for example service A is internally 192.168.0.1:82/info/login and service B is 192.168.0.1:82/tech/login.
I am trying to give these services easy to use names like for example info.mycompany.com and tech.mycompany.com so that it is easy to access for the employees but I am obviously missing something because I have had no luck setting up anything. My
company is still using SBS 2003 as it's AD and DNS server so I am working with flint and bear skin here.
I am also trying to do the same thing for the external access to these services but where as I have the internal address for these services I have the external static IP. When using the external IP with the port from outside the network everything
works fine but I would like for it to to have a simple name identical to the internal names but accessible from the outside. I frankly feel out of my depth on both of these issues and I would really appreciate any help that can be lent. Thank you.

You cant set a dns record (that would be used by a browser) to point to an ip and port, srv records can but that requires the application to look them up.
To have info.mycompany.com point to 192.168.0.1:82/info/login you
would add a cname or A record to the dns pointing to that IP, then in IIS you would assign that dns name to the host headers. Also in IIS you would need to use
URL rewrite plugin with this you would setup a redirect for that host header {HTTP_HOST} to point to that link.

HTTPS, DNS and dynamically updating DNS records

Hello to you all, if you are able to help with a DNS problem that I'm having then please accept my thanks and appreciation in advance.
First some background information, I recently moved my server from my studio to my house where a new purpose built studio will soon be erected. At my old studio any requests for myurl.com came in via the IP (whether that be http, https, ftp etc) from the domain registrar and the router would send the request to the relevant port number whether that be 80 for http or 443 for https etc and all was well as this location had a fixed IP address. Unfortunately at my new location whilst I have a much faster connection I do not have a fixed IP. To get around this I have the following set up (not ideal for a business I know but perfectly OK for home hosting); I set up two psuedo nameservers at no-ip.com (ns1myurl.com and ns2myurl.com) which tracks the changes in my IP address and updates its records accordingly, my registrar then sends any requests to these 'nameservers' and no-ip then forwards it on to my server. So far so good.
The problem arises once the requests get to my server, whilst I have DNS set up, I can only recieve requests from a straight request to the server ie myurl.com will display the site without any problem, but if I then put a www in front of that or try to access the https part of my site (which is set up as a seperate site on the same server) then the server throws an error. I have tried to put an alias (CNAME) into the zone but it does not want to resolve the request. I have searched around but to no avail, I am totally new to DNS so am currently on a steep learning curve and fumbling around in the dark.
The first thing that I need to get working is the request to be resolved correctly and then (and this is where the real fun starts!) is to dynamically update the IP in the DNS records as the IP changes. I will probably have to get help in on this as I understand that this requires BIND of which I know nothing about, first though I'd like to get the pages to be served up correctly. Advice, hints, tips or links to tutorials all greatly appreciated. Full set up listed below.
Many thanks, David.
Xserve PPC G5 running 10.5.8 unlimited set up as standalone OD master
Xraid
APC UPS
CradlePoint MBR1200 Gateway router which acts as the DHCP
http://myurl.com and https://myurl.com set up as 2 seperate sites and located on the Xraid
Current DNS setup:
Primary Zone name: myurl.com with nameservers ns1myurl.no-ip.info and ns2myurl.no-ip.info and allow zone transfers in checked
Then
Name
Type
Value
myurl.com
Primary Zone
        ns1myurl.no-ip.info
        Machine
12.34.56.78 (external IP)
        ns2myurl.no-ip.info
        Machine
12.34.56.78 (external IP)
        myurl.com.
        Machine
12.34.56.78 (external IP)
        www.myurl.com.
        Alias
myurl.com.
With the reverse zone looking thus with allow zone transfers being checked
Name
Type
Value
56.34.12.in-addr.arpa.
Reverse Zone
        12.34.56.78
        Reverse mapping
        myurl.com.

Thanks for the reply Camelot, that part though I had already figured out. I now have this working, all I did was change the external IP to the internal one of the server with resolves with the .local machine name and all is working just fine (for now!). As long as I have primary zones set for each site and any alias or services set up on them then everything works well.. The real test will be when my ISP changes the IP, whilst my tests have proved successful the proof will be when they update the address.
Thanks anyway. David.

Creating DNS record

Hi,
Our external facing web server was recently moved to an external hosting provider but when they set it up they set the address as Home - Dilworth School instead of Home - Dilworth School. There is a database backend to this and changing the name of the server would be a major undertaking. The problem is that any emails that are generated from within this website have links pointing to Home - Dilworth School. The company that manages our external DNS records have put in an appropriate record so people outside get sent to the right place but I cannot work out how to do this internally.
When I go to create a resource record in the DNS/DHCP management console it insists that I must fill in the owner name field so I am not sure how to get around this.
thanks
Keith

Thanks - that worked. Windows would not let me do it - tried to create a DNS key when I asked it to create a resource record. Running the DNS/DHCP management console directly on the server worked.

Can we generate the Offfice 365 MX-Token needed for the MX-DNS-Record by ourselves?

Hi there
As a hosting company we programmed a DNS-zone-editor in which our customers can edit their DNS-zone. A new feature we are offering is a so-called "DNS-Template-Service", in which our customers can select predefined record templates like GoogleApps
and then trigger by one click the installation of the predefined records.
We also would like to offer them "Office 365" as a template. According to this article https://support.office.com/en-ie/article/Create-DNS-records-at-any-DNS-hosting-provider-for-Office-365-7b7b075d-79f9-4e37-8a9e-fb60c1d95166#BKMK_add_CNAME we
understand that all we need to do is to add a couple of CNAME, TXT and SRV records which is great.
However, there is also an MX record with a dynamical component (the "MX-Token") that is required:
<MX token>.mail.protection.outlook.com
We understand that this token can be fetched by the customer from their office installation. However that would break the purpose of our templating system that is designed to work like an on/off switch.
So our question is if there is any way that our system could generate this token by itself since we have knowledge of the customers domain anyway.
According to some customers who already installed those records manually we can see some patterns:
Example 1: domain1.com results in an MX with a value of
domain1-com.mail.protection.outlook.com
This is easy: just replace the dot with a hyphen.
However for domains with hyphens in the name a special conversion is made and appended on the back of the first part:
Example 2: domain-withdash.com results in an MX with a value of domainwithdash-com01e.mail.protection.outlook.com
Example 3: dom-ainwithdash.com results in an MX with a value of domainwithdash-com0i.mail.protection.outlook.com
Example 4: doma-in-withadash.ch results in an MX with a value of domainwithdash-com01bb.mail.protection.outlook.com
So what is the algorithm for this (probably bidirectional) conversion?
Thanks for letting us know and make it easier for our customers to use office 365 with their own domain name.
Regards
Lukas
Developer @ cyon GmbH

We actually spent the last 1.5h to reverse-engineer the pattern and (hopefully) found the right answer on how these hyphen-replacements are substituted.
* This functions generates a token as done in office 365
* @return mixed|string
private function getOffice365MxToken($domain)
$delimiter = '0'; // delimiter between the domain part and the hyphen replacement part
$token = $domain;
$hyphenReplaceToken = '';
// split domain string into chunks of 4 chars
$chunkSize = 4;
$chunks = str_split($token, $chunkSize);
// transform the hyphens (their position) in the domain name to an alphanumerical character string
$skipCount = 0;
$intOfA = ord('a'); // get the decimal value of the letter 'a' as start value
foreach($chunks as $chunk){
$digit = $intOfA;
for ($i = 0; $i < $chunkSize; $i++){
if('-' === $chunk[$i]){
$digit += pow(2, $i);
if($intOfA === $digit){ // if the value is a it means no hyphen was found
$skipCount++;
continue;
if (0 !== $skipCount) {
$hyphenReplaceToken .= $skipCount;
$hyphenReplaceToken .= chr($digit);
$skipCount = 0; // rewind skip count
if(strlen($hyphenReplaceToken) > 0){
$token .= $delimiter . $hyphenReplaceToken;
$token = str_replace('-', '', $token); // remove - from domain name
$token = str_replace('.', '-', $token); // replace dots with -
return $token;
Short-hand explanation: The pattern showed that the domain string simply gets chunked into pieces of 4 chars. For each setting at which hyphen(s) can be located at the index value (seen as bit mask 0124) is added up. The resulting number we get per chunk
then can be added to starting decimal value of the letter 'a' (97) and thus gives us another letter that substitutes the hyphens locations in this chuck. If no hyphen is found, the algo simply counts for how many chunks none were find and adds this up sa a
number.
These concatenated letters + skip-numbers then result in the replacement token that gets appended on the end of the domain name (hyphens removed, dots replaced with hyphens).
Oh and yeah, between these two parts a '0' is added as delimiter.
That's it. I hope we got it correct.
Regards
Lukas @ cyon GmbH

Certificates CNAME or Host (A) Record?

We just installed Exch 2013 but have not put it into production yet. We are confused about what domains to include in our certificate request. Our ISP host our email and Network Solutions host our domain and we would like to keep it that way. We have just
one static IP, and at Network Solutions there is an A Record for goto.domainname.com that points to that IP address --this is in use for our current SBS2003 box running Exchange 2003 and we use that certificate for Remote Web Workplace, OWA, etc. We do not
intend to use that A record with Exchange 2013.
This is our setup with exchange 2013:
1. Our (internal) root domain name is different from our (external) email domain name: ad.domainname.com vs. domainname.com - so we do not use split-dns (I think)
2. We need to use the same static IP that is in use with our SBS2003 box.
3. We will be using Outlook 2010 and 2013 to connect users to Exchange mailboxes.
4. We want to use Outlook Web Access, ecp, Active Sync, & Autodiscover
Question1: We read in this article:
http://www.mustbegeek.com/configure-external-and-internal-url-in-exchange-2013/ that we needed to create CNAME records at our public DNS server (Network Solutions) to point to mail.domainname.com . Do we create CNAME records or add another Host (A)
record that points mail.domainname.com to our IP address?
Question2: Do we also create a similar record for autodiscover.domain.com?
Question3: Internally, what address do we use to access mailbox for non-outlook users? Would it also be
https://mail.domainname.com?
question4: For the certificate, how do we make sure our Outlook 2010/13 clients can connect to Exchange? Do we include the Intranet domain selections for the certificate -such as autodiscover.ad.domainname.com?
Thanks!

Seriously consider deploying split DNS. It makes all this stuff work so much easier. It's not at all hard to do.
Your CN should be the hostname in the URL used for OWA and other web services, e.g., webmail.domain.com.
You need SANs for every e-mail domain you host. If you host just domain.com, then you need just one SAN, autodiscover.domain.com.
If you host multiple domains, you can use SRV records instead for Autodiscover and reduce the number of SANs you need to put in the SAN.
All the Autodiscover records can point to the same IP address as webmail.
If you don't deploy split-brain DNS, then you'll need to add the internal name in the certificate as well, e.g., webmail.domain.internal. But deploy split-brain DNS and enjoy the benefits. In my opinion it's stupid to hairpin traffic out to the
Internet and back in again through your firewall just because you don't have split-brain DNS.
Configure Set-ClientAccessServer -AutodiscoverServiceInternalUri to use autodiscover.domain.com so you don't have to add server names as SANs.
For the hostname, you can use webmail, mail, owa, pluto, bigfish, or whatever you want, just so you define it in your virtual directory URLs and include it in your certificate.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

DNS record with 2 IPs

I am running a DNS server on a 10.6.6 box and want to add a 2nd IP to a DNS record on the LAN. The reason being is that I backup clients to a PresSTORE server onto tape. Some laptops are not always connected by ethernet so it would be handy to "drop back" to the wireless IP address. I have tried adding the 2nd (wireless) IP for a DNS entry but when pinging the client it only tries the 1st IP in the list. Reverse DNS points to both IPs. Is there a way of doing this?
Any help finding a solution would be greatly appreciated.
Cheers, Paul

This reeks of an IP subnet routing error, a DNS error, or of a firewall or connectivity issue.
No, No & No
DNS would not likely be my first stop here, if I do understand what you're up to. (And I'm not certain I do.)
OK this is as simple as I can think of asking... I have one DNS A Record for a client with 2 IP addresses, one IP for ethernet, other for wireless. Obviously they both can't have the same IP on the same subnet so if DNS lookup can't resolve to 1st IP, how can one force it to try resolving to 2nd before giving up with an error?
I guess the ethernet & wireless could have the same IP if they were both not active when both connected. But expecting the user to switch off wireless when the etherent cable is plugged in and switch back on when the cable is unplugged, for the same of simplicity of a network connection *+I think not+*.
Also with IPs in the A Record, I have found DNS always tries resolving to the higher of the 2 IPs first (192.168.1.35 before 192.168.1.36). Then if .36 is offline it won't try resolving to .35 again until the DNS cache has been flushed.
Are these using WiFi routers, or access points?
Simple Apple Extreme Base Station configured as a wireless access point.
Is there one IP subnet for all hosts irrespective of wired or wireless connection, or multiple subnets?
One IP subnet
Is there one DHCP server, or multiple DHCP servers?
One DHCP server
Is your PresSTORE box configured with static IP?
Static, not that is makes the slightest bit of difference.
By the look of it I am gonna have to wait until PresSTORE supports Bonjour!

DNS Records Questions - TXT Files

Hello everyone, I would like to preface this post with, this is my first time dealing with DNS records. However, the instructions seem a little confusing, so i would like your professional feedback.
Currently using Godaddy for hosting. Ill start with the instructions, then my set up, my result and my questions.
Instructions:
You will be adding two separate TXT entries to your DNS record - note - be sure that you do not add any carriage returns when copying the key, below:
First Entry (This is called the DKIM policy record):
Name: _domainkeyTXT: "t=y; o=~;"If your domain is 'foo.com', then the 'name' entry will look like this when it is displayed as: "_domainkey.foo.com"
Second Entry: (This is called the 'selector record' and includes a public crypto key):
Name: key1._domainkeyTXT: "k=rsa\; p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKQrQeUnNX/CQBIXWqeHc8lKl+EwhGKzPuDRbDjnN2Xzl8N4Fc2oQ6R+opnEM6U4x4p
3NggEyNg8Mp2W6oUYpAECAwEAAQ=="
If your domain is 'foo.com', then the 'name' entry for this will look like this when it is displayed: "key1._domainkey.foo.com"
That's it!
You can send a test message to a yahoo email address, then select Actions->View Full Headers in Yahoo
when you view the email. If you have configured DKIM correctly, the header information for the email will include a line similar to:
Authentication-Results: mta1084.mail.mud.yahoo.com from=mypinpointe.com; domainkeys=pass (ok)
Fisrt Entrey
Hostname: @
TXT Value: _domainkey.mydomain.com: t=y; o=~;
TTL: 1/2 hour
Second Entry:
Hostname: @
TXT Value: key1._domainkey.mydomain.com: k=rsa; p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKQrQeUnNX/CQBIXWqeHc8lKl+EwhGKzPuDRbDjnN2Xzl8N4Fc2oQ6R+opnEM6U4x4p3NggEyNg8Mp2W6oUYpAECAwEAAQ==
TTL: 1/2 hour
Results
1. a really long string of code, but when you search for it here is the result Doesnt say domainkeys=pass (ok):
Authentication-Results: mta1466.mail.gq1.yahoo.com from=giglinxusa.com; domainkeys=neutral (no sig); from=crapemyrtle.mypinpointe.com; dkim=pass (ok)
Questions
1. Should the TXT value include "", like they have it in the instructions?
2. In the first entry, should there be so many spaces after the .com: t=y
3. What are carriage returns? (assuming spaces)

Hello,
but I don't understand anything else then you will use Godaddy.
What is the aim of this? Connecting an email domain to your internal network or about web services? Please be more specific in your description what you are trying to achieve.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Smart Hosts & DNS records

Similar Messages

Maybe you are looking for