Hans Carlos

carlos62@labtop3a:~> dig -t txt _domainkey.schnelle-uebersetzungen.com ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.schnelle-uebersetzungen.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44644 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: ff6ccc339874cec207e720795c9a0311e9d52b4d2ee9a7b4 (good) ;; QUESTION SECTION: ;_domainkey.schnelle-uebersetzungen.com. IN TXT...

The Problem is Huge ... The next on ... carlos62@labtop3a:~> dig -t txt _domainkey.upmdata.pl ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.upmdata.pl ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13057 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 44b1380ecad6f05a9fb894795c9a01e8b818df12e23069f5 (good) ;; QUESTION SECTION: ;_domainkey.upmdata.pl. IN TXT ;; ANSWER SECTION:...

Here is some thing Special, there is some other Wildecard Source for junk at the _domainkey DNS Label .... so an generalized Wildcard Trap is MANDATORY. carlos62@labtop3a:~> dig -t txt _domainkey.shanater.us ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.shanater.us ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48418 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 5 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 8836575809494cc29ac02c415c9a00bc7a358c2b1648f0cf...

And the Next One .... carlos62@labtop3a:~> dig -t txt _domainkey.vivaldi.net ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.vivaldi.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62241 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 5 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 98da21cc4fc51c7b8bf5dbb85c9a00177c46d16dd6bc0f53 (good) ;; QUESTION SECTION: ;_domainkey.vivaldi.net. IN TXT ;; ANSWER SECTION: _domainkey.vivaldi.net....

carlos62@labtop3a:~> dig -t txt _domainkey.org.com ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.org.com Now i know what i must seach to find cases .... ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10598 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 1a8bce4bfcad081c3d8247fd5c99fb65f322c30cc1426f0a (good) ;; QUESTION SECTION: ;_domainkey.org.com. IN TXT ;; ANSWER SECTION:...

I have turn off the DKIM :-/ ... SAD ... The next Domain of this Kind .... carlos62@labtop3a:~> dig -t txt _domainkey.einfachlecker.de ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.einfachlecker.de ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27125 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 75593bfb73205e48ca54cd7a5c99f96808faae341ee31ab9 (good) ;; QUESTION SECTION:...

The Next Domain if this Kind: blockb:/var/log # dig -t txt _domainkey.fps-law.de ; <<>> DiG 9.11.2 <<>> -t txt _domainkey.fps-law.de ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28278 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 81d2e2903a3c46aafb072a8e5c98f859083585725b9fe526 (good) ;; QUESTION SECTION: ;_domainkey.fps-law.de. IN TXT ;; ANSWER SECTION: _domainkey.fps-law.de....

To Manually disable DKIM in relation to the Domains in Question is a nonsense recomendation. In that Cases there was someone who wants me contant and can not do so because of the Bug in his Domain. A want to Avoid such cases. A negativ List does not work. Only a positive List wich means an Activation of DKIM for reviewed Domains may be work ... but that is no acceptabel work. The Only way to solve the Problem be Configuration is in my opinion is to disable DKIM completly ... wich is sad. Or even...