hmLoadTopic({
hmKeywords:"ADSP,Authentication-Results header,Cryptographic,Cryptographic Verification,DKIM,DKIM ADSP,DKIM Signatures,DKIM Verification,DKIM verifying,DomainKeys Identified Mail,Verifying DKIM",
hmTitle:"DKIM Verification",
hmDescription:"Use this screen to configure MDaemon to verify DomainKeys Identified Mail (DKIM) signatures in incoming remote messages. When this feature is enabled and an incoming message has",
hmPrevLink:"security--domainkeys_identified_mail.html",
hmNextLink:"security--dkim_sign.html",
hmParentLink:"security--domainkeys_identified_mail.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Sender Authentication &gt; <a href=\"security--domainkeys_identified_mail.html\">DomainKeys Identified Mail<\/a>",
hmTitlePath:"Security Menu > Security Manager > Sender Authentication > DomainKeys Identified Mail > DKIM Verification",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">DKIM Verification<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/sender-authentication_dkim-verification.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Use this screen to configure MDaemon to verify DomainKeys Identified Mail (DKIM) signatures in incoming remote messages. When this feature is enabled and an incoming message has been cryptographically signed, MDaemon will retrieve the public key from the DNS record of the domain taken from the signature and then use that key to test the message’s DKIM signature to determine its validity.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">If the signature passes the verification test, the message will continue on to the next step in the regular delivery process. Additionally, if the domain taken from the signature also appears on the <a href=\"security--approved_list.html\" class=\"topiclink\">Approved List<\/a>, the message’s Spam Filter score will receive a beneficial adjustment.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For more on DKIM see: <\/span><span class=\"f_T_Code\"><a href=\"http:\/\/www.dkim.org\/\" target=\"_blank\" class=\"weblink\">http:\/\/www.dkim.org\/<\/a><\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">DKIM Verification<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable DKIM verification<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this option to enable DomainKeys Identified Mail verification of incoming remote messages.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not verify messages from authenticated sessions<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this option if you want to exempt messages from cryptographic verification when the message session is authenticated. Authenticated sessions include those verified via <a href=\"security--smtp_authentication.html\" class=\"topiclink\">SMTP Authentication<\/a>, <a href=\"security--pop_before_smtp.html\" class=\"topiclink\">POP before SMTP<\/a>, or the <a href=\"security--ip_shielding.html\" class=\"topiclink\">IP Shield<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not verify messages from trusted IPs<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option if you want connections from <a href=\"security--trusted_hosts.html\" class=\"topiclink\">trusted IP addresses<\/a> to be exempt from DKIM verification.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Exempt list<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to open the exception list. Messages originating from any IP addresses specified on the list will not be subject to cryptographic verification.<\/span><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Authentication-Results header<\/span><\/h2>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Whenever a message is authenticated using SMTP AUTH, SPF, DomainKeys Identified Mail, or DMARC, MDaemon will insert the Authentication-Results header into the message, listing the results of the authentication process. If MDaemon is configured to accept messages even when they fail authentication, then the Authentication-Results header will contain a code to identify the reason for the failure.<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">There is ongoing work via the Internet Engineering Task Force (IETF) on this header and the authentication protocols mentioned in this section. You can find more information on this at the IETF web site, located at: <\/span><span class=\"f_T_Code\"><a href=\"http:\/\/www.ietf.org\/\" target=\"_blank\" class=\"weblink\">http:\/\/www.ietf.org\/<\/a><\/span><span class=\"f_Notes\">.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">DKIM Headers in Mailing List Messages<\/span><\/h2>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">By default, MDaemon strips DKIM signatures from incoming list messages because those signatures can be broken by changes made to the message headers or content during list processing. If you would like MDaemon to leave signatures in list messages, you can configure it to do so by manually setting the following option in the <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">MDaemon.ini<\/span><span class=\"f_BodyText\"> file:<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">[DomainKeys]<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">StripSigsFromListMail=No (default is &quot;Yes&quot;)<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-family: Arial,Helvetica,sans-serif; color: #000000;\">&nbsp;<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--domainkeys_identified_mail.html\" class=\"topiclink\">DomainKeys Identified Mail<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--dkim_sign.html\" class=\"topiclink\">DKIM Signing<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--dkim_options.html\" class=\"topiclink\">DKIM Settings<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\">&nbsp;<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\">&nbsp;<\/span><\/p>\n\r"
})
