DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

learn more… | top users | synonyms

1
vote
2answers
131 views

Should DKIM selector names be unguessable?

The M³WAAG DKIM Key Rotation Best Practices document (pdf) recommends a "sufficiently" random DKIM selector name so that it cannot be guessed by browsing the DNS. A literal quotation: 4.3 Key ...
1
vote
2answers
726 views

opendkim incoming not verified

I've installed opendkim with postfix on Debian Wheezy. Outgoing mail is getting DKIM signatures. The smtpd and non-smtpd milter spec is the same. Incoming mail seems not to be verified - in a ...
1
vote
2answers
422 views

How do I use an include statement in a TXT record?

We have a client that is using an email service that requires a TXT domain key reocrd that is over 127 characters long. I'm pretty sure BIND allows this, however we run djbdns with tinydns and it ...
0
votes
2answers
99 views

Error sending emails from a mail server relay type falling into the spam folder (using postfix)

Here I show one of the emails that come to Yahoo, which are falling directly into SPAM folder. The SPF goes smoothly, the DKIM passes without problem, even DMARK passes without problem, but just keep ...
0
votes
2answers
309 views

exim dkimproxy configuration - explanation?

I'm trying to setup DKIM on exim in a cPanel VPS. I'm going with the DKIM Proxy option since cPanel is seriously dragging its feet with the it's-definitely-coming 11.32 release. These guides here, ...
0
votes
2answers
261 views

Yahoo is sending our server's transactional email to the Spam folder, even though we have set up SPF and DKIM

Yahoo Mail is sending our server's transactional emails to the Spam folder, even though we have taken quite a few anti-spam steps. By contrast, Gmail allows the messages through to the inbox just ...
5
votes
1answer
167 views

Designating A DKIM Signer Other Than The “From” Domain

A few months ago, I implemented SPF/DKIM/DMARC for my three-person company. After a trial period, I switched our DMARC to "p=reject", so that emails are rejected if they fail SPF/DKIM. Generally, it ...
1
vote
1answer
240 views

DKIM Signing not working, amavisd indicates that is passes

amavisd-new testkeys indicates a pass, but mailtest@unlocktheinbox.com says that my DKIM signature could not be found? Anyone ran into this before? Anyone got any easy ways to set up DKIM signing? ...
1
vote
1answer
246 views

DKIM failure when using Exim4 as an “edge transport” for Exchange 2010

I have a server running Exim 4.72 that is set up similar to the Exchange "Edge Transport" role: it forwards mail from the internet to Exchange and forwards mail from exchange to the internet. I ...
0
votes
1answer
22 views

Partial DKIM pitfalls?

We've recently implemented DKIM for automated emails sent out from our website (SMTP on static IP). However we cannot implement DKIM for our hosted exchange email accounts (managed hosting sends from ...
0
votes
1answer
231 views

DMARC is blocking email that seems like it should be allowed

This is the DMARC record we have set v=DMARC1; p=reject; rua=mailto:[redacted]@coinbase.com; adkim=r; aspf=s So we are rejecting any not match with SPF strictly, and DKIM is relaxed. Here is the ...
0
votes
1answer
140 views

How sendgrid assigning its DKIM keys when we send email from application

I was exploring about DKIM. I read an email which was sent via sendgrid and with application from remote server. My question is , how can assign the DKIM key of own server if sender id do not exist in ...
0
votes
1answer
20 views

Domain Key Entries

More BIND DNS questions. OK, my changes the the zone files are no propagating out. Now I'm having a problem with the domain key entries I'm trying to create. I'm starting by trying to set the domain ...
0
votes
1answer
326 views

OpenDKIM - verifying mail forwarded by mailing lists

I'm using OpenDKIM for verifying signed mails that are incoming to my mail server and use it as a spam addon (if dkim is broken, mail lands in Junk). However, I'm getting lot of false-positives with ...
0
votes
1answer
349 views

named.conf to include zone file and opendkim conf

I would like to separate out opendkim default.txt from zone file and to be include in named.conf instead. I'm a little bit confused on which approach I should use and which is the correct one. ...
0
votes
1answer
478 views

DKIM in Plesk with DNS managed remotely

Our primary domains DNS is managed over at Amazon Route 53, and so in Plesk (11.x) I've turned DNS off. The problem is that I want to begin using DMARC which requires both SPF and DKIM txt records to ...
0
votes
1answer
146 views

DKIM signing having same public key

I have 20 servers hosted on orderbox DNS hosting,I have set up opendkim on all servers with signing by domain say "example.com" i.e d=example.com in DKIM header of all the server outbound mails. The ...
0
votes
1answer
78 views

Rewrite header when no dkim header for specific domains

I have been receiving a lot of mails that are "From" my domain. These mails have usually a different return path (spf passes), but have for example my email in the to and the from header. ...
-1
votes
1answer
2k views

dkim signature not present or bad format

I'm going mad with dkim-filter + postfix. My message are signed but Gmail notify me errors like "dkim=neutral(no signature)" or "dkim=neutral(bad format)" I don't know what is wrong. I've generated ...
-1
votes
1answer
496 views

Debian Unstable + Postfix 2.6.5 + dkim-filter 2.8.2 issue

I have Postfix installed on Debian Unstable, as the title states, the system is completely up-to-date, I have tried to get DKIM signatures working on outgoing mail using dkim-filter 2.8.2. I couldn't ...
3
votes
0answers
430 views

Exim 4.71 does not add DKIM signature to outgoing emails

I am trying to add DKIM to my domain, I have created a key, added the following to /etc/exim4/conf.d/transport/30_exim4_config_remote_smtp: dkim_domain = mydomain.com dkim_selector = mail1 ...
2
votes
0answers
19 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
1
vote
0answers
353 views

postfix opendkim DKIM-Signature and Domainkey-Signature

Running postfix on CentOS 6 as an edge relay for a while now, so all our outgoing mail is routed through one point with opendkim signing the mail. This works great. I was originally using ...
1
vote
0answers
188 views

Postfix + Amavisd-new as smtp-proxy (pre-queue) for inbound only, postqueue for outbound?

I am in the planning phase of building a mailserver with the following requirements relevant to my question: Use postfix, virtual users (two virtual domains) Must filter pre-queue to reject ...
1
vote
0answers
345 views

Sendmail rewriting headers after OpenDKIM signature

I have run into a problem described in section Sendmail REWRITING FEATURES on http://www.opendkim.org/README: Due to the way the milter protocol is incorporated into the MTA, opendkim sees the ...
1
vote
0answers
295 views

Not Connecting from my zimbra webmail

I have configured zimbra webmail on centos 5.5 64bit server for e-mail authentication. I have installed DKIM and dk-filter on it after installation to check authentication. I tried to open zimbra by ...
0
votes
0answers
21 views

Exim mail not signing DKIM. Don't find whats wrong. (detailed description of steps taken)

I'd like to setup my fresh server (ubuntu) for hosting my www.bolleboos.be website and enable sending of email from my php scripts. So... I installed apache, php, mysql, ... and for the mail exim4 ...
0
votes
0answers
64 views

AmazonSES + DKIM + Hotmail = temperror

Although SPF is passing, I'm getting a dkim=temperror on hotmail only (it's working on Yahoo and Gmail). I'm using AmazonSES, and already have the proper CNAMES for DKIM signing on my domain at ...
0
votes
0answers
37 views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key ...
0
votes
0answers
67 views

Hotmail/Outlook.com DKIM failure when signing with different domain - header.d ignored

We (sender.org) provide a mail server for a client (example.org) and sign outgoing messages with our private DKIM key (we cannot change the signing domain to the client's domain). Return-Path: ...
0
votes
0answers
77 views

DKIM error - no key

Im using PowerMTA and trying to get dkim to work. Im using godaddy DNS. Gmail is giving me : dkim=neutral (no key for signature) header.i=@ same thing with yahoo: permerror(no key) dig output: ...
0
votes
0answers
61 views

Postfix+DKIM using Amazon's second private IP address

I use Amazon EC2 with 2 private IPs. I have 2 postfix instances (using multi-instance builtin support) with opendkim. Each instance works when I send email (over telnet) using the primary private IP ...
0
votes
0answers
75 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
0
votes
0answers
57 views

AWS Linux/Sendmail/dkim-milter — how to troubleshoot?

I'm trying to get Sendmail to use dkim-milter on an AWS Linux instance (similar to RHEL/Centos). I've been trying to use these directions, which are a bit out of date, but which seem to work: ...
0
votes
0answers
78 views

spamassassin not loading DKIM module

I kept noticing SA 3.3.1 giving DKIM invalid even though my webmail system performs an additional check using OpenDKIM that does return valid for some. I ran sa-update -D and got this: module not ...
0
votes
0answers
82 views

OpenDKIM: no MTA name match (host=myhost.mydomain.com, MTA=myhost.mydomain.com)

i'm using OpenDKIM together with Postfix MTA and while DKIM solutions is working well but in /var/log/mail.log i can see opendkim is complaining about OpenDKIM: no MTA name match ...
0
votes
0answers
293 views

EXIM4 sent mail sometimes rejected, always put in spam. DKIM and SPF pass + reverse DNS

Recently I've been seeing some instances of Your access to this mail system has been rejected due to the sending MTA's poor reputation. in my maillog and have noticed that my emails have been getting ...
-1
votes
0answers
78 views

from gmail -> Our system has detected that this 550-5.7.1 message is likely unsolicited mail.

I installed opendkim and configured it on my mailserver. every test including http://dnsviz.net/d/nyctelecomm.com/dnssec/ and mxtoolbox was returning a perfect rating. Then today, without a restart ...