DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

learn more… | top users | synonyms

2
votes
1answer
786 views

What does dis=NONE mean in an email's Authentication-Results header?

The following is from an email I received recently: Authentication-Results: mx.google.com; spf=neutral; dkim=pass header.i=@yahoo.com; dmarc=pass (p=REJECT dis=NONE) header.from=...
2
votes
2answers
210 views

Postfix header stating wrong IP

I am using Postfix 2.11.3 on Debian 8.0 I configured Postfix to run multiple instances (3), one for each public IP connected to our server in order to balance outgoing traffic depending on the ...
2
votes
3answers
272 views

Email won't send

2013-01-18 10:33:04 cwd=/home/USER/public_html/clients 3 args: /usr/sbin/sendmail -t -i 2013-01-18 10:33:04 1TwDwG-00023y-Ks <= USER@host.mydomain.com U=USER P=local S=3993 id=...
2
votes
3answers
904 views

Exim: How to turn off DKIM for forwarded mail?

I have DKIM configured in Exim for outgoing mail, as per the documentation. Exim signs all outgoing mail. But some of those outgoing messages are forwards, thanks to a user's .forward file. This is ...
2
votes
1answer
4k views

ive got dkim=neutral (bad version) header.i with gmail and dkim=fail (unknown key type) with yahoo

I'm having external ip and ubuntu server with exim4.71 and bind9. I'm trying to set valid dkim entry to send mail for gmail Here are my configuration files: bind9: _domainkey.example.com. IN ...
2
votes
1answer
65 views

Exchange Online, Mandrill, SPF and DKIM

I have a customer ABC Ltd (abc.ie) who has a requirement to send emails via SMTP to their own customer base from within an application that we have developed for them. For their company email they ...
2
votes
1answer
358 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
2
votes
1answer
4k views

Publishing long domain key records in bind9

I am setting up a mail system based on exim4. This system implements DKIM signing and checking (among other things). Signing seems to work without problems but checking doesn't work and exim4 ...
2
votes
2answers
15k views

How to avoid messages rejection because of DMARC when sent through Gmail alias?

Many people add ' another email address as alias ' for their Gmail accounts - talking here about public Gmail not Google Apps - and they may use Gmail server not their domain servers as SMTP with the ...
2
votes
2answers
132 views

What is the Value of using DKIM to sign mail when the from header doesn't match?

My domain is domain.tld, where I have DKIM functioning just fine. All of my domain emails are signed, and pass. I have a need now to send mail on behalf of my customers occasionally - ie: send email ...
2
votes
1answer
104 views

Understanding the many “FROM” addresses that apply to SenderID, DKIM, and SPF

Can someone tell me when and why a client, MTA relay, Unix .Forward, anonymous relay, or listserver will create, or alter these headers: Resent-Sender: Resent-From: Sender: From: If you can please ...
2
votes
1answer
3k views

DKIM on postfix relay server

I have a postfix/amavis relay server, with the domain name mail.example.com. It will be a relay for dozens of VPS's, which will have domains like hostname.example.net. So i have actually two ...
2
votes
1answer
772 views

Mail classified as spam, but passes SPF and DKIM

I have configured Postfix to be responsible for subdomain.example.com (google apps is responsible for example.com so I didn't want to mix the two). As I mentioned in question title, SPF and DKIM ...
2
votes
3answers
5k views

DKIM- Filter No Signature Data

I have installed DKIM-Filter on Postfix after reading this tutorial http://www.unibia.com/unibianet/systems-networking/how-setup-domainkeys-identified-mail-dkim-postfix-and-ubuntu-server My email ...
2
votes
2answers
7k views

gmail dkim=neutral (no signature)

After testing much and retracing my steps, I still cannot get google mail to validate. My mail server is Debian 5.0 with exim Exim version 4.72 #1 built 31-Jul-2010 08:12:17 Copyright (c) ...
2
votes
2answers
230 views

How important is sender validation, and what matters?

When I started learning how to configure email, SPF existed but there were doubts about whether it was a good thing, and the value of offering SPF records in DNS. Now it seems that it is widely ...
2
votes
2answers
414 views

SMTP server on Win2008, SPF ecc

I want be able to send outgoing email from my website. I want to setup Win2008 smtp to be able to send them respecting all the spam rules. My checklist is: the smtp should be able to accept ...
2
votes
1answer
63 views

DKIM - Single host - Multiple IPs

Trying to figure out the best practice for implementing DKIM on a single EC2 which will have multiple, elastic IPS. # /etc/opendkim.conf ... Mode sv Canonicalization relaxed/...
2
votes
1answer
2k views

DMARC is blocking email that seems like it should be allowed

This is the DMARC record we have set v=DMARC1; p=reject; rua=mailto:[redacted]@coinbase.com; adkim=r; aspf=s So we are rejecting any not match with SPF strictly, and DKIM is relaxed. Here is the ...
2
votes
1answer
123 views

When creating DomainKeys does it matter if I use o=~ or o=-?

I used this utility to create my DKIM key (1024 bit size), since Gmail has been blocking us (we had an old joomla install exploited, was around before me). And I got this back: Your Selector Record: ...
2
votes
2answers
2k views

opendkim incoming not verified

I've installed opendkim with postfix on Debian Wheezy. Outgoing mail is getting DKIM signatures. The smtpd and non-smtpd milter spec is the same. Incoming mail seems not to be verified - in a ...
2
votes
1answer
1k views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me P=...
2
votes
1answer
1k views

How can I change exim's DKIM and SPF for emails sent?

I've now spent 2 hours trying to figure out this issue and I am about to give up and go to bed. I've been having issues with Gmail rejecting emails from my VPS server because of false spam alerts (...
2
votes
1answer
1k views

How to fix DKIM for mail on VPS hosting?

I have a hosted VPS that is fully managed by the hosting company. For weeks they cannot figure out how to get DKIM working for my emails, even though in cPanel's Email Authentication section says DKIM ...
2
votes
1answer
825 views

DKIM for email through Google Apps domain with external outbound relay

I'd like to enable the new Domain Keys DKIM email authentication feature for a domain hosted in Google Apps. Some of my users use an external SMTP gateway (such that when they send email, it doesn't ...
2
votes
1answer
149 views

Why does Yahoo DMARC Report show DKIM is Valid for emails coming from Google's Servers?

My domain name for the below issue is developcents.com, and I run my own Postfix implementation on CentOS 7. I've had ongoing issues for several months where emails I send from my mail server (...
2
votes
1answer
441 views

Hotmail/Outlook.com DKIM failure when signing with different domain - header.d ignored

We (sender.org) provide a mail server for a client (example.org) and sign outgoing messages with our private DKIM key (we cannot change the signing domain to the client's domain). Return-Path: ...
2
votes
0answers
85 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
2
votes
2answers
1k views

Postfix sends email to spam (gmail, hotmail)

I recently installed a postfix + dovecot + dkim multi domain, multi user, multi alias mail server on my debian squeeze system. Everything works except for one big issue that basically makes the whole ...
2
votes
1answer
479 views

using own mail server with external domain and dns. Now have internal dns. dkim test not working

I am not very knowledgeable in this area, but have been able to make great head way. Now i am stuck I setup my own mail server, e.g mailbox.example.com. I had the domain dns point to my mail server ...
1
vote
3answers
46 views

DKIM: Can I simply change the RSA key used in DKIM without changing the DKIM selector?

Can I simply change the RSA key used in DKIM (DNS TXT Record) without changing the DKIM selector or will this result in any issues? If not, what's them the purpose of the DKIM selector? BTW: 20120113 ...
1
vote
5answers
883 views

What domain name should appear in a DKIM signature?

I followed these instructions to setup OpenDKIM with Postfix, and it works as advertised. My outgoing mails have the DKIM-Signature header added, for example: DKIM-Signature: v=1; a=rsa-sha256; c=...
1
vote
4answers
4k views

OpenDKIM Filter: Unable to create listening socket

hi i keep getting this error in maillog.any ideas Jul 22 10:16:52 veepiz opendkim[5145]: OpenDKIM Filter: Unable to bind to port inet:20209@localhost: Address already in use Jul 22 10:16:52 veepiz ...
1
vote
2answers
603 views

Spam delivered by mx.google.com despite SPF fail

Some spammer use our e-mail address as sender in forged e-mails. Now we got thousands of bounced messages from no longes existing e-mails. We set up SPF and DKIM records but it does not stop. ...
1
vote
3answers
3k views

dkim-filter key retrieval failed

I've set up dkim-filter on my mail server. I've set up postfix to use dkim-filter as the milter; However, I'm getting the following in my logs: Jul 7 13:00:29 magni postfix/smtpd[6742]: connect ...
1
vote
1answer
87 views

What order to split TXT records get assembled in?

As per RFC4408 3.1.3, a TXT record can be split up with quotation marks and will be reassembled properly - this is a way of getting around the 255 character limit on record size. IN TXT "v=spf1 .... ...
1
vote
3answers
490 views

SPF and DKIM help: Do the FAIL reports from DMARC indicate an issue?

I am having trouble determining if my SPF and DKIM are configured properly. Here are key details: My domain is mysteryscience.com We send mail from google apps, from SendGrid, and from Intercom. All ...
1
vote
2answers
40 views

Allowing a partially trusted server to send mail for one given address via SPF / DKIM

I run a web service that should be able to send out e-mails using a company address, e.g. foo@company.com. I do not, however, want to give this service access to the mail server of company.com (for ...
1
vote
1answer
3k views

Spamassassin DKIM DNS issue

Here is the setup where I encounter my issues : My computer has the IP 10.6.2.5. There is a DNS server ns.isp6.lab with the IP 10.6.2.4 (I can reach it). My computer has Postfix + Dovecot + ...
1
vote
1answer
2k views

How to correctly configure postfix and opendkim and let receiving server know all details mailed-by signed-by?

What I am trying to achieve - Bottomline: mails to go in inbox rather spam folder. I have a server which is running postfix (mail server) and I have 3 domains. Mail server is used for both incoming ...
1
vote
3answers
2k views

DKIM showing bad format

Setting up DKIM on my Postfix/CentOS 5.6 server. It sends and signs the emails, but Google still showing it neutral. The errors I'm getting are: dkim=neutral (bad format) header.i=@r02.lbsmtp.org ...
1
vote
3answers
52 views

mails fom my mailserver go to spam folder of hotmail.com

I set up a mail server with dovecot/postfix on a debian server. I don't send commercial mail or newsletters. We are only 4 users and nobody send SPAM. We only send classical mails (no large pictures ...
1
vote
1answer
324 views

Are “via” and “on behalf of” headers determined by both DKIM and SPF?

To get rid of the "via" and "on behalf of" headers in Gmail and Outlook, do I need to set both the DKIM and the SPF records, or are DKIM records enough? We recently changed our SMTP provider from ...
1
vote
1answer
198 views

What is X-DKIM header for?

There are some emails with an X-DKIM header (next to DKIM-Signature) like this: X-DKIM: Sendmail DKIM Filter v2.8.2 DOMAIN SOMEVALUE However I am unable to find decent documentation for it. What is ...
1
vote
1answer
222 views

DKIM error - no key

Im using PowerMTA and trying to get dkim to work. Im using godaddy DNS. Gmail is giving me : dkim=neutral (no key for signature) header.i=@ same thing with yahoo: permerror(no key) dig output: ...
1
vote
1answer
2k views

Configuring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP servers

Today we realized that all of our emails being sent to email addresses of the type <username>@corporatedomain.com were getting rejected. I don't know who is hosting the email for corporatedomain....
1
vote
2answers
6k views

cPanel Server Email to Gmail marked as Spam, SPF, DKIM, and rDNS pass

Having this issue on a cPanel server 11.34.1 that hosts multiple domains. Email originating from this box on the sendingdomain.com address is flagged as Spam by Gmail. I've implemented SPF and DKIM, ...
1
vote
1answer
5k views

How to setup X-SID , X-AUTH & X-DKIM at windows server 2008 r2 with IIS 7.5

I am very sad that my legit emails drops to spam box while i receive many spam emails into my inbox. I very rarely send announcement emails to my all registered members (over 400k right now) but most ...
1
vote
2answers
197 views

Trying to configure email server for sending only

I need to install Postfix or Exim to be able to send emails from my web server's php code. I have a few questions hopefully I can find answers to: Could mail be rejected or sent to spam on ...
1
vote
2answers
174 views

would this header cause the email to be flagged as suspect?

Authentication-Results: [snip].mail.[snip].[snip].com from=someDomain.com; domainkeys=neutral (no sig); from=someDomain.com; dkim=neutral (no sig) Received: from 127.0.0.1 (EHLO smtp1....