up vote 0 down vote favorite
1
share [g+] share [fb]

I'm having external ip and ubuntu server with exim4.71 and bind9. I'm trying to set valid dkim entry to send mail for gmail

Here are my configuration files: bind9:

_domainkey.example.com.       IN      TXT     "o=-;"
mail._domainkey.example.com.  IN      TXT     "v=DKIM1;k=rsa-sha256;p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMDO8xXc3fMjQnWs6ejxTsrMa4xvb0470b2wCIbx1/790huhBr1386mkvvzeTpDDwkFmOZWXnJLw+Qeh4p/rkNQ7AVCk2uZQ+Kwy+jxM17QdZaDxSY9U1HYUFXC8BKAUYwIDAQAB"

I've got this results from check-auth@verifier.port25.com

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham

Any idea what the problem is?

from yahoo:

from=example.com; dkim=fail (unknown key type)

ive change k=rsa-sha256 to just k=rsa and now 

from=example.com; dkim=pass (ok)

This also helped with gmail :)

Solution:

v=DKIM1;k=rsa-sha256;p=... --> v=DKIM1;k=rsa;p=....

Question solved

link|improve this question
100% accept rate
Using dkim-filter or dkimproxy? Can you add t=y to both TXT records, let TTL time out and retry? Also, if you can publish the full headers (with hidden hosts/ips) from google mail? – 3molo Apr 5 '11 at 7:52
1  
t=y its just a test mode. Ive managed to solve this. Ive made a mistake in key declaration. just put k=sha and thats all. – MealstroM Apr 5 '11 at 7:54
Please post an answer and mark it accepted - that's the correct way to do it on this site. – Iain♦ Apr 5 '11 at 8:18
@lain thanks. Ill be able to do this in 12 hours. – MealstroM Apr 5 '11 at 8:41
feedback

1 Answer

up vote 1 down vote accepted

Solution: change dkim field in BIND9 zone: from v=DKIM1;k=rsa-sha256;p=... to --> v=DKIM1;k=rsa;p=.... rsa-sha256 or rsa-sha1 doesnt work for me :(

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.