1IPSEC_MAILKEY(8) IPSEC_MAILKEY(8)
2
3
4
6 ipsec mailkey - mail DNS records for Opportunistic Encryption
7
9 ipsec --me my@address.tld [--reverse 1.2.3.4 aaa]
10 [--forward hostname.domain.tld]
11
12
14 Mailkey is a meta-program. It generates a script which will attempt to
15 mail the TXT records required to enable Opportunistic Encryption (OE).
16
17
18 An e-mail address for the domainâs DNS administrator is derived from
19 SOA records. The mail body and destination address are freely editable
20 in the script.
21
22
23 If no administrator can be located, the output file will not be exe‐
24 cutable.
25
26
27 The --me option sets the Reply-to: address of the mail to be sent.
28
29
30 The --forward hostname sets the domain name to be used for initia‐
31 tor-only OE.
32
33
34 The --reverse ip-address sets the ip address to be used for full Oppor‐
35 tunistic Encryption.
36
37
39 ipsec mailkey --me paul@xelerance.com --forward bofh.xelerance.com
40 creates the i-OE record for use on bofh.xelerance.com.
41
42
43 ipsec mailkey --me paul@xelerance.com --reverse 193.110.157.17
44 creates full-OE record for use on bofh.xelerance.com's static IP
45 address.
46
47
49 /etc/ipsec.secrets
50
51
53 ipsecshowhostkey(8),host(8)
54
55
57 Written for the Linux FreeS/WAN project <http://www.freeswan.org/:
58 http://www.freeswan.org/> by Sam Sgro.
59
60
61
62
63 IPSEC_MAILKEY(8)