Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've installed opendkim with postfix on Debian Wheezy. Outgoing mail is getting DKIM signatures. The smtpd and non-smtpd milter spec is the same.

Incoming mail seems not to be verified - in a mail client there is no Authentication-Results header. I've added "AlwaysAddARHeader yes" to the opendkim config, but no difference.

In the mail log, on receipt of a message, among all the various entries there are two by opendkim. The first identifies the server and adds "not internal" (which seems reasonable when it is Google). The second just says "not authenticated". But I can't see any reason why it's not authenticated! Where can I look for the solution?

share|improve this question
add comment

1 Answer 1

The "not authenticated" may be just because the remote mail server is not signing their messages. Not everybody out there is signing their emails with DKIM. In fact, this mechanism is not so widely implemented as it should be. That being said, the fact that you use DKIM it's going to greatly improve your mail deliverability, but don't expect that everyone sending mails to your organization use it as well. DKIM it's growing slowly in my humble opinion.

You may find interesting this DKIM deployment trends experiment.

Also, if you are sure that the remote server is signing their messages and your mail server ignores it, I suggest that you check for known bugs here.

share|improve this answer
    
The incoming messages I'm talking about are definitely signed - the DKIM signature is in the email header. The problem is that there isn't an Authentication-Results header added by opendkim when viewing the email in Thunderbird. Other checks done on the mail server, such as SPF, have added headers. But not DKIM. –  user203826 Jan 4 at 23:25
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.