DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

learn more… | top users | synonyms

1
vote
1answer
5 views

OpenDKIM and canonicalization of quotes

In the long-running battle against a considerable percentage of the DKIM failures for the signatures generated on my servers, I've noted an interesting occurence. Today I've got this DKIM failure ...
2
votes
2answers
61 views

Receiving DMARC reports for emails I do not send

I am hosting the email for my domain (lets call it example.com) on google apps (free legacy edition). I recently enabled the DMARC reports so I now get a daily report for the emails sent from my ...
0
votes
2answers
12 views

Yahoo mail authentication dkim=permerror (bad sig)

When I send emails to any yahoo account the authentication result shows the following: YAHOO RESULT: Received-SPF: pass (domain of anildagia.com designates 66.225.220.59 as permitted sender) ...
0
votes
0answers
11 views

Yahoo marked my mail as spam [duplicate]

Yahoo is marking our mail as spam. Mail header says that Domain Key, PTR, SPF all ok. From Abrabos Mon Jan 18 23:41:38 2016 X-Apparently-To: carry.vaillant@yahoo.com; Mon, 18 Jan 2016 23:45:10 +0000 ...
-1
votes
0answers
22 views

Mails are signed with 2 DKIM signatures in Postfix

I´ve installed postfix, opendkim, dovecot, spamassasin and amavis an debian 8. I´ve installed the dkim service by ...
-3
votes
1answer
29 views

DKIM - DomainKey Identified Mail public key longer than 512 character [closed]

I've generated private key and public key using following commands. openssl genrsa -des3 -out server.key openssl rsa -in server.key -out server.key.insecure mv server.key server.key.secure mv ...
0
votes
1answer
60 views

SPF + DKIM + DMARC with Gmail account and external mail server

I,m using gmail with own domain (Google Apps) for my project. Now I want to add external mail server for sending notifications for users. Gmail doesn't give private keys for DKIM and if keys will be ...
7
votes
3answers
4k views

Find DKIM and DMARC Records?

Is there a method to find a domain's DKIM and DMARC records using dig or nslookup? I have attempted to do the following: dig somedomain.org any returns many records, but not the known DKIM and ...
0
votes
2answers
41 views

Mail with DKIM Signature gets T_DKIM_INVALID flag by SpamAssassin

I've installed a Debian (jessie) box with postfix and spamassassin. Configured and everything works fine. Except receiving mails with DKIM signatur will produce a flag T_DKIM_INVALID even if the ...
1
vote
1answer
35 views

Sign DKIM on relay mail server

I found some email have header: Received: by 10.112.172.99 with SMTP id bb3csp690725lbc; Fri, 8 Jan 2016 11:37:33 -0800 (PST) X-Received: by 10.55.15.139 with SMTP id ...
1
vote
0answers
15 views

How do I use SRS rewrite the From header on a forwarded email message

I have a serious problem here. I run a labor dispatch website, where users can register their cell phones (I send them an auth code via text, they enter it at the website, it's entirely opt-in). A job ...
3
votes
1answer
2k views

DKIM body hash fail

We're sending out e-mails with EXIM 4.71 from a PHP application. DKIM is enabled and is working properly, unless when sending a specific type of mails, which results in dkim=neutral (body hash did not ...
1
vote
0answers
19 views

Sendmail refuses to sign messages with DKIM provided by opendkim

I have sendmail and opendkim installed on ubuntu 14.04 and would like to configure DKIM. Unfortunately sendmail refuses to sign outgoing emails with DKIM. Despite the fact that it already did ...
1
vote
3answers
19 views

DKIM: Can I simply change the RSA key used in DKIM without changing the DKIM selector?

Can I simply change the RSA key used in DKIM (DNS TXT Record) without changing the DKIM selector or will this result in any issues? If not, what's them the purpose of the DKIM selector? BTW: 20120113 ...
2
votes
1answer
56 views

correct order for Postfix milters

I use the following milters with Postfix: ClamAV, OpenDKIM, OpenDMARC, Rspamd This is also the order they are being called via smtpd_milters. What would be the best order for them regarding ...
1
vote
1answer
36 views

DKIM: Can I use a RSA key larger than 2048bit, i.e. 4096?

I wonder if I can simply use a 4096bit RSA key for DKIM (in DNS TXT Record). Are there any downsides (neglecting computational effort)? Maybe there are mail servers which can't handle a key this ...
3
votes
3answers
6k views

Domain Key not showing up in DNS query

*SOLVED - See bottom of this post * So problem here is that I have been trying to set up a domain key for several days. I've done it successfully in the past, but I just can't get it to work this ...
0
votes
1answer
48 views

Email in SPAM with Debian 8.2 [duplicate]

I have a problem (BIG PROBLEM) with SPAM. All the emails my mail server (Debian 8.2 and ispconfig latest stable) send, end up in spam. I'm using Google Apps. I did a test on spamscorechecker.com ...
-1
votes
1answer
39 views

Spam from my email address on my domain with DKIM

Someone is sending spam emails from my email address. And it looks like these emails have DKIM. How is this can be possible if they doesn't have access to that email? (my emails handles by something ...
-1
votes
2answers
26 views

What is the proper format for a DKIM type TXT value in a DNS Zone record?

I'm setting up Email Authentication and I'm seeing conflicting info on the format. Some say that the value should be surrounded in " " But other services have told me to leave out the surrounding " ...
3
votes
2answers
57 views

Why do I need to escape ; with \ in a DNS DKIM record?

I'm setting up Email Authentication on our domain to allow authentication with our Email Service Provider. My understanding is that the DNS record needs to have any ; escaped, e.g., \; I just want ...
0
votes
0answers
30 views

DKIM fail signature doesnt verify

I had setup postfix and dkim and keep on getting dkim=fail on port25 and gmail checks. DKIM check details: Result: fail (signature doesn't verify) ID(s) verified: Canonicalized Headers: ...
1
vote
0answers
11 views

DKIM verification in exim4

I'm confused about the acl_smtp_dkim. In my main config I have # DKIM verification on rcpt. acl_smtp_dkim = acl_check_dkim domainlist require_dkim_signed_mail_domains = gmail.com:paypal.com ...
0
votes
2answers
5k views

problems with opendkim and postfix centos

Hi im having problems with opendkim signing mail. check my log. i fixed the permission issue by chowning that file. but still emails are not being signed. any clues? running on centos5 with ...
0
votes
0answers
44 views

DKIM, SPF, DMARC, SPF OK mails are flagged as SPAM

I have a dedicated server running CentOS7 with Postfix, the problem is that all the sent mails are flagged as SPAM by hotmail and gmail despite DKIM, SPF, DomainKeys, DMARC records and keys wich are ...
0
votes
1answer
3k views

I can't send email from my server to gmail addresses

I'm using postfix, and have setup spf, dkim, and domainkeys. I can get my email to go to Yahoo, but not gmail. Here's the headers from an email send to Yahoo. Yahoo reports the email as domain key ...
-1
votes
1answer
45 views

DKIM signature and domainkeys failing [closed]

I'm trying to setup DKIM for my server but there seems to be some problem with the DNS. I am using a windows server and plesk for the administration, my mail server is MailEnable standard and for my ...
0
votes
1answer
67 views

SPF, DKIM, DMARC, DomainKeys OK, emails flagged as SPAM [closed]

I have a new dedicated server running CentOS7 with Plesk 12.5 with postfix, and i have succesfully set SPF, DKIM, DMARC and DomainKeys as it shows this test from port25.com: ...
2
votes
2answers
77 views

Migrating Email Providers; Are Multiple DKIM Records Viable During Transition?

I am currently gathering requirements for a small (hopefully) project of migrating from SendGrid to Mandrill as a transactional email service provider. We have been using SendGrid for close to 3-4 ...
0
votes
2answers
261 views

Exim4 doesn't add DKIM signatures

I cannot overcome a problem with exim - it's not adding DKIM headers to my outgoing mail. support:~# cat /etc/issue Debian GNU/Linux 7 \n \l support:~# dpkg -l|grep exim ii exim4 ...
1
vote
0answers
17 views

Setting DKIM and SPF records for client domains

I have created an email server that is capable of handling mail for multiple websites. e.g. tom@website1.com, tom@website2.com etc. The emails are sending and receiving fine, but the spam score is ...
6
votes
2answers
359 views

Designating A DKIM Signer Other Than The “From” Domain

A few months ago, I implemented SPF/DKIM/DMARC for my three-person company. After a trial period, I switched our DMARC to "p=reject", so that emails are rejected if they fail SPF/DKIM. Generally, it ...
1
vote
1answer
58 views

OpenDKIM not signing outgoing mail

I'm trying to setup OpenDKIM on my mailserver running Debian and Postfix. This is the configuration I've done: Generated two keys (for two domains I need to send mail for) Configured KeyTable, ...
8
votes
1answer
637 views

Exim 4.71 does not add DKIM signature to outgoing emails

I am trying to add DKIM to my domain, I have created a key, added the following to /etc/exim4/conf.d/transport/30_exim4_config_remote_smtp: dkim_domain = mydomain.com dkim_selector = mail1 ...
0
votes
1answer
22 views

Two DKIM signatures in outgoing messages

I have DKIM and SPF correctly configured on my server with postfix (myserver.com). However, when I send emails from Gmail configured to authenticate and send email as myname@myserver.com ...
1
vote
1answer
36 views

Two different dkim result records in DMARC report from google

I get DMARC report from google, and the dkim check appears twice, one with pass, the other with fail status. This same report includes another record from the same IP with all pass status. Any idea ...
0
votes
3answers
126 views

Improving email deliverability: Implementing DKIM and DMARC

I have a messaging system on my app where users can send messages directly to other users straight from my domain (not going through Mailchimp's Mandrill templates or Google Apps). I also have cron ...
3
votes
1answer
21 views

When implementing DKIM, should I publish DNS first or start signing first?

I am about to implement DKIM signing on my domain, but couldn't find information about which one to start first: publish DNS or start signing keys. Explains better: Considering the time DNS takes to ...
1
vote
1answer
23 views

OpenDKIM - How can I set these signing options in the conf file

I followed this guide for opendkim, and I wondering how to set the following options in the conf file: Signature expiration (x) creation time (t) standard headers to be validated (h=) body signature ...
0
votes
0answers
261 views

DKIM-verification fails because of “insecure key”

I have my Debian (7.9 "wheezy") E-Mail-server (Postfix 2.9.6-2) setup to sign and verify DKIM signatures in e-mail messages using OpenDKIM (version 2.6.8-4). When I send myself an e-mail from my ...
5
votes
4answers
8k views

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that ...
1
vote
2answers
70 views

What are the implications of inserting a DKIM record for a third party sending email on our behalf?

Our organization is setting up an account with a third party cloud service that will be sending emails on our behalf. Our marketing department would like to eliminate the "via" or "on behalf of" bits ...
1
vote
1answer
27 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
0
votes
1answer
42 views

DKIM is not Failing When Messages Come From Another Domain

Somebody sent out spam messages with a forged From: address, so that the messages appeared to come from us. The headers clearly show otherwise. We have DKIM and SPF set up. The problem is that in the ...
1
vote
1answer
199 views

What does dis=NONE mean in an email's Authentication-Results header?

The following is from an email I received recently: Authentication-Results: mx.google.com; spf=neutral; dkim=pass header.i=@yahoo.com; dmarc=pass (p=REJECT dis=NONE) ...
1
vote
3answers
280 views

SPF and DKIM help: Do the FAIL reports from DMARC indicate an issue?

I am having trouble determining if my SPF and DKIM are configured properly. Here are key details: My domain is mysteryscience.com We send mail from google apps, from SendGrid, and from Intercom. All ...
1
vote
2answers
357 views

Postfix - Opendkim - Unable to connect to local socket

I am getting denied errors when postfix tries to connect to the unix socket for opendkim, actual error: Sep 24 15:41:43 service-a-4 postfix/cleanup[17414]: warning: connect to Milter service ...
0
votes
1answer
171 views

Route53 DNS and DKIM/TXT

I've been trying to set an openDKIM public key as a TXT record within the Route53 hosted zone for my domain. The record is mail._domainkey .zewtie.io but, however I enter the public key in the ...
2
votes
1answer
48 views

DKIM - Single host - Multiple IPs

Trying to figure out the best practice for implementing DKIM on a single EC2 which will have multiple, elastic IPS. # /etc/opendkim.conf ... Mode sv Canonicalization ...
0
votes
1answer
36 views

Amazon SES DKIM signing with Route 53 issue

I had DKIM signing setup and working fine for my example.com for years. But recently i moved my DNS to amazon Route 53 and added all records there, including the CNames that was previously with the ...