Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I followed the dkim-filter install instructions from Ubuntu's community help page

My dkim-filter is signing DKIM signatures with this

v=1; a=rsa-sha256; c=simple/simple;;s=mail; t=1312301159;bh=*hashstring omitted*=;h=Subject:Message-Id:Date:From:To;b=*key omitted*  

GMail and Hotmail both say the DKIM's invalid (bad format) the dkim checker says version should be v=DKIM1 and not v=1, a is not a defined field, c is not a defined field, d is not a defined field, and mail is not a valid service type, among a bunch of other stuff

Did I misconfigure something in dkim-filter?


Turns out my registrar only allows 64 characters in the TXT entry this sucks

share|improve this question
Postfix can not do anything with DKIM. Therefore it delegates everything to dkim-filter. This is why I'm going to edit your question. – mailq Aug 2 '11 at 16:38
up vote 1 down vote accepted

You've got something wrong. The dkim-checker checks DKIM-DNS records, not DKIM signatures. Your signature looks pretty good (except the omitted values).

share|improve this answer
Oh. Maybe the DNS records haven't propagated yet? Can I check that? – CheapSteaks Aug 2 '11 at 16:50
Sure. dig for it. – mailq Aug 2 '11 at 16:53
This is probably a dumb question, but when I enter the DKIM TXT record, should it be "" with the period at the end, or without? The community help page shows it having a period at the end, but I don't understand why it's there, and I can't tell either way if it's not working because of the delay in propagation or of it's a problem somewhere else :( – CheapSteaks Aug 2 '11 at 17:16
It must work with the dot in the end and without the dot in the end. But to make sure you really lookup the right entry please add the dot in the end. It makes sure that you lookup a FQDN. – mailq Aug 3 '11 at 8:50

This question is a close duplicate of this one. Follow the instructions there.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.