Generic records and DKIM
DAve <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
Good afternoon, I am working to setup DKIM and DomainKeys on our servers. I have the key signing working fine in qmail but I am having issues with tinydns serving the key data, the issue is true for SPF records as well. In order to serve the DKIM key I created generic records with a record type of 16 for TXT. When I test the server with dnsq everything looks good. I almost pushed the changes live but decided to test with dig first. I cannot seem to get dig to display any generic records. ### My records, (I trimmed the center out of the key data) :default._domainkey.pixelhammer.com:16:k=rsa;p=MIGfMA0G.....l9ZdpiyS+wIDAQAB:86400 :_domainkey.pixelhammer.com:16:t=y;o=-;[email protected]:86400 :pixelhammer.com:16:v=spf1 mx a\072smtp1.tls.net a\072smtp2.tls.net ~all:86400 ### Testing with dnsq which works, # dnsq txt pixelhammer.com 10.0.240.66 16 pixelhammer.com: 212 bytes, 1+1+3+3 records, response, authoritative, noerror query: 16 pixelhammer.com answer: pixelhammer.com 86400 16 v=spf1\040mx\040a:smtp1.tls.net\040a:smtp2.tls.net\040~all authority: pixelhammer.com 86400 NS ns1auth.tls.net authority: pixelhammer.com 86400 NS ns2auth.tls.net authority: pixelhammer.com 86400 NS ns3auth.tls.net additional: ns1auth.tls.net 86400 A 65.124.104.30 additional: ns2auth.tls.net 86400 A 65.123.104.30 additional: ns3auth.tls.net 86400 A 65.124.110.14 ### Testing with dig which does not work, # dig @10.0.240.66 -t TXT pixelhammer.com ;; Warning: Message parser reports malformed message packet. ; <<>> DiG 9.3.2 <<>> @10.0.240.66 -t TXT pixelhammer.com ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48125 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; QUESTION SECTION: ;pixelhammer.com. IN TXT ;; Query time: 25 msec ;; SERVER: 10.0.240.66#53(10.0.240.66) ;; WHEN: Tue Mar 17 14:41:41 2009 ;; MSG SIZE rcvd: 212 The errors are the same whether I query the domainkey or spf record. Note that in production the spf records work fine as a text record beginning with a '. The issue seems to be only generic records. Obviously I have missed something in my searching for how to setup generic records. Can anyone offer up a clue? Thanks, DAve -- "Posterity, you will know how much it cost the present generation to preserve your freedom. I hope you will make good use of it. If you do not, I shall repent in heaven that ever I took half the pains to preserve it." John Quincy Adams http://appleseedinfo.org