Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm having external ip and ubuntu server with exim4.71 and bind9. I'm trying to set valid dkim entry to send mail for gmail

Here are my configuration files: bind9:

_domainkey.example.com.       IN      TXT     "o=-;"
mail._domainkey.example.com.  IN      TXT     "v=DKIM1;k=rsa-sha256;p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMDO8xXc3fMjQnWs6ejxTsrMa4xvb0470b2wCIbx1/790huhBr1386mkvvzeTpDDwkFmOZWXnJLw+Qeh4p/rkNQ7AVCk2uZQ+Kwy+jxM17QdZaDxSY9U1HYUFXC8BKAUYwIDAQAB"

I've got this results from check-auth@verifier.port25.com

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham

Any idea what the problem is?

from yahoo:

from=example.com; dkim=fail (unknown key type)

ive change k=rsa-sha256 to just k=rsa and now

from=example.com; dkim=pass (ok)

This also helped with gmail :)

Solution:

v=DKIM1;k=rsa-sha256;p=... --> v=DKIM1;k=rsa;p=....

Question solved

share|improve this question
    
Using dkim-filter or dkimproxy? Can you add t=y to both TXT records, let TTL time out and retry? Also, if you can publish the full headers (with hidden hosts/ips) from google mail? –  3molo Apr 5 '11 at 7:52
1  
t=y its just a test mode. Ive managed to solve this. Ive made a mistake in key declaration. just put k=sha and thats all. –  MealstroM Apr 5 '11 at 7:54
    
Please post an answer and mark it accepted - that's the correct way to do it on this site. –  Iain Apr 5 '11 at 8:18
    
@lain thanks. Ill be able to do this in 12 hours. –  MealstroM Apr 5 '11 at 8:41
add comment

1 Answer

up vote 1 down vote accepted

Solution: change dkim field in BIND9 zone: from v=DKIM1;k=rsa-sha256;p=... to --> v=DKIM1;k=rsa;p=.... rsa-sha256 or rsa-sha1 doesnt work for me :(

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.