DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

learn more… | top users | synonyms

0
votes
2answers
39 views

Required entries in DNS records [closed]

Writing a brief best practices technical document for in house. A Records for hostname / IP mapping (blank).mydomain.com www.mydomain.com *.mydomain.com -can also add subdomain, ftp, cpanel, etc ...
6
votes
2answers
2k views

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it ...
0
votes
1answer
701 views

Email authentication without modifying DNS records

Can someone explain how Mailchimp does email authentication without user having to update SPF or DKIM records? Quote from Mailchimp: When you use MailChimp's authentication, campaigns will pass ...
0
votes
1answer
847 views

dkim-milter appears not to be signing my emails correctly

I have a VPS that I had a fresh install of CentOS 6 on it and then I installed virtualmin on it and we've been great for a few months. I've been hosting a handful of domains from there and on one of ...
0
votes
1answer
654 views

unknown configuration line “INPUT_MAIL_FILTER(dkim-milter, S=inet:8891@localhost)”

I followed a tutorial using the socket connection dkim-milter to sign my outgoing mail. I did it and the conf file loaded fine. But I discovered that my mail were not signed. I found many other ...
0
votes
1answer
743 views

Dkim DNS Setup: dig +trace finds the key, dig notrace doesn't

i'm setting up DKIM for my domain to sign outgoing mails. I've got some issues on DNS configuration, because DNS configuration is mixed between external DNS (hosting) and a cloud server, which sends ...
0
votes
1answer
843 views

How to write DKIM TXT DNS Record in GoDaddy?

I am trying to understand how I should write my DKIM key in GoDaddy. What I wrote in the picture is my guess but I will then add my DKIM Key to sendmail and if I'm note sure this one is right I'll ...
0
votes
1answer
103 views

SPF, Sender ID and DKIM signing - Does Sender ID need to be configured if DKIM signing in place?

While learning about SPF, Sender ID and DKIM siging, it seems that Sender ID and DKIM exist to solve similar problems. In addition, Sender ID is discussed in a fairly unflattering light on several of ...
1
vote
1answer
330 views

DKIM Signing not working, amavisd indicates that is passes

amavisd-new testkeys indicates a pass, but mailtest@unlocktheinbox.com says that my DKIM signature could not be found? Anyone ran into this before? Anyone got any easy ways to set up DKIM signing? ...
2
votes
3answers
3k views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...
0
votes
2answers
2k views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 -...
0
votes
1answer
1k views

Configure postfix to DKIM-sign emails generated from the system

My web hosting server features a Postfix setup up and running. That postfix is also open with STARTTLS on port 587 for authorized users (only me, myself and I right now) to send emails to any domain ...
0
votes
1answer
3k views

What is wrong in my DKIM setup? I'm getting all fails

I own a domain name I have implemented SPF and DKIM to avoid my mails being junked. I have also upgraded to DMARC in monitor mode. Since I received a few failure reports recently I wanted to ...
0
votes
1answer
445 views

Can't get opendkim to work on Ubuntu

I just set up my first mail server on Ubuntu 12.04 LEMP server with Postfix and Dovecot using this guide, and it may have been the happiest day of my life to send an email to my Gmail account. The ...
4
votes
1answer
5k views

postfix + opendkim not signing correctly. how to debug this?

EDIT: I did get a little further but all posts on my search say permissions are wrong or regenerate key but I fixed that to be 644 as well as owned by DKIM AND I keep regenerating the key but it is ...
0
votes
1answer
1k views

named.conf to include zone file and opendkim conf

I would like to separate out opendkim default.txt from zone file and to be include in named.conf instead. I'm a little bit confused on which approach I should use and which is the correct one. ...
1
vote
1answer
115 views

DKIM on postfix server but not Exchange server?

We are looking into setting up DKIM to improve email deliverability and conform better to best practices for email. We currently have two servers that can send email for a domain - one is CentOS ...
8
votes
1answer
669 views

Exim 4.71 does not add DKIM signature to outgoing emails

I am trying to add DKIM to my domain, I have created a key, added the following to /etc/exim4/conf.d/transport/30_exim4_config_remote_smtp: dkim_domain = mydomain.com dkim_selector = mail1 ...
2
votes
2answers
15k views

How to avoid messages rejection because of DMARC when sent through Gmail alias?

Many people add ' another email address as alias ' for their Gmail accounts - talking here about public Gmail not Google Apps - and they may use Gmail server not their domain servers as SMTP with the ...
1
vote
1answer
387 views

Mail is marked as spam although SPF and DKIM pass

I have configured Postfix to send mail from a dedicated server hosted let's on IP X.X.X.X and domain name example.com. DKIM, SPF always pass when I send mail locally from that host but still ends up ...
1
vote
1answer
137 views

Set up spf and dkim, where email domain and sending domain differ

I have two domains: foo.com and bar.com Only foo.com is using Google Apps and thus can send emails. I now have a service running on bar.com\application that uses the email application@foo.com to ...
4
votes
1answer
2k views

DKIM body hash fail

We're sending out e-mails with EXIM 4.71 from a PHP application. DKIM is enabled and is working properly, unless when sending a specific type of mails, which results in dkim=neutral (body hash did not ...
0
votes
3answers
126 views

DKIM partial implementation

My organization has 2 mail servers. One is our MS Exchange server for corporate mail. The other is an SMTP server (not Exchange) our application uses to send automated email notifications to our users....
1
vote
2answers
6k views

cPanel Server Email to Gmail marked as Spam, SPF, DKIM, and rDNS pass

Having this issue on a cPanel server 11.34.1 that hosts multiple domains. Email originating from this box on the sendingdomain.com address is flagged as Spam by Gmail. I've implemented SPF and DKIM, ...
10
votes
2answers
3k views

How did spammer spoof emails with my google apps domain (it even has DKIM!)

I have been getting a lot of bounce-backs lately. I thought my google apps account has been compromised, but there is no activity on my apps account, and there is certainly no malicious user that I ...
2
votes
3answers
272 views

Email won't send

2013-01-18 10:33:04 cwd=/home/USER/public_html/clients 3 args: /usr/sbin/sendmail -t -i 2013-01-18 10:33:04 1TwDwG-00023y-Ks <= USER@host.mydomain.com U=USER P=local S=3993 id=...
0
votes
1answer
235 views

How to Masquerade Sendmail Domain and Make DKIM Use the Correct Domain

I have a single domain with a dozen subdomains for different sites. Each has a separate virtual host in apache. I configured sendmail to masquerad as the top-level domain so that emails are always ...
2
votes
3answers
932 views

Wildcard configured emails allow spammers to deliver mail? (SPF: “softfail”)

I have a Google Apps account set up for one of my domains. Wildcard email delivery is enabled on this domain for all emails (ie. anything@domain.com passes emails along to myemail@domain.com), and the ...
17
votes
2answers
12k views

Remove “via” from emails sent to Gmail from Amazon SES

When sending emails from Amazon SES, gmail shows "sent via amazonses.com". How do I remove this? According to Google, I'm a sender and I don't want my recipients to see the "via" link. What can I ...
-2
votes
1answer
173 views

Modify DNS TXT Record in Domain Control Panel or Apache [closed]

I am trying to setup DKIM for email verification and have been asked to add a public key to my DNS. Add public key in your DNS; here is a sample resource record with selector "default": default....
2
votes
2answers
132 views

What is the Value of using DKIM to sign mail when the from header doesn't match?

My domain is domain.tld, where I have DKIM functioning just fine. All of my domain emails are signed, and pass. I have a need now to send mail on behalf of my customers occasionally - ie: send email ...
1
vote
2answers
570 views

How to force postfix to use ip that is configured for domain?

I want to confirm to SPF and DKIM, this requires me to send email using the IP written in the DNS record of the domain I have two domains example1.com and example2.com with two IPs 100.0.0.1 and 100....
0
votes
1answer
83 views

speed DKIM signing in mail server

I'm running email sending campaigns with milions of emails, and I need to sign each and one of them with DKIM. Unfortunately that's the bottleneck of the process. I wonder if I can calculate a DKIM ...
0
votes
2answers
1k views

Sent mails go to spam on Gmail but not on Yahoo

Why is a message like the following going to Gmails SPAM folder? I noticed that the same message goes correctly to Yahoo!s Inbox, but observing the header i see (in the received Yahoo message the ...
1
vote
1answer
103 views

DKIM for Email Service Provider clients

How would you go about implementing DKIM signing in this scenario? You have a service that allows customers to logon to your web application, create a newsletter, and send it to their subscribers ...
2
votes
2answers
2k views

What is the correct mail set up for multiple domains on one server?

I have a machine (centos 5) with one external ip address. On that machine I have many virtual hosts with a few different top level domain names and sub-domains under those eg. sub1.domain1.com sub2....
2
votes
3answers
904 views

Exim: How to turn off DKIM for forwarded mail?

I have DKIM configured in Exim for outgoing mail, as per the documentation. Exim signs all outgoing mail. But some of those outgoing messages are forwards, thanks to a user's .forward file. This is ...
-1
votes
1answer
651 views

How do I setup Postfix (Ubuntu) and Google Apps to DKIM sign outgoing emails?

I am using Linode and have built a LAMP stack. I setup Google Apps (free edition) to handle all incoming mail. I've also setup Google Apps to use DKIM authentication. The problem is when my ...
0
votes
2answers
381 views

DKIM, spam probability, signing with key at mail server vs sender domain? [duplicate]

I'm working on an email marketing tool and so far we've been recommending our customers to set up an SPF-record (Sender-ID) and a DKIM-record, we also have our own SPF-record on the mail server and a ...
1
vote
1answer
106 views

Sendmail's maillog polluted by dkim-filter

I just added domain keys to my sendmail configuration and everything appears to be working. However, upon reviewing the maillog I get a ton of these when an email gets sent or received: Oct 4 09:42:...
1
vote
2answers
237 views

Is there a common X-Header for RFC 2821 “MAIL FROM”? Should it be DKIM signed?

w.r.t. the difference between RFC2821 MAIL From and RFC2822 FROM I'm considering having my MTA add a header specifying what was sent in the MAIL FROM portion of the envelope. The RFC2821 header is ...
4
votes
1answer
341 views

Does DKIM works with subdomains?

ISP's recommend you segment your marketing and transactional emails by using different IPs. I want to start using DKIM, but since DKIM is a domain based reputation system I wonder if signing with the ...
1
vote
1answer
151 views

Ubuntu precise, postfix, google apps - outgoing mail

a n00b question from a developer, not an server admin. I'm learning - built out a linode box and have included Wordpress multisite. I have Google Apps (free) setup to handle incoming. WP sends emails ...
0
votes
2answers
818 views

Unable to send mail to hotmail from rackspace cloud

I'm having issue sending mail from postfix on a rackspace cloud instance for my domain. Hotmail says "550 SC-001 (SNT0-MC4-F35) Unfortunately, messages from 198.101.x.x weren't sent. Please contact ...
1
vote
1answer
117 views

DKIM sign any outgoing mail as the same domain. is possibly?

I have a website, and the users recommend via email to another persons, so the mail come from my site, but I need to appear the user as sender, but "via" mydomain. The logically and what lists ...
79
votes
6answers
40k views

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are so ...
0
votes
1answer
176 views

DKIM signing having same public key

I have 20 servers hosted on orderbox DNS hosting,I have set up opendkim on all servers with signing by domain say "example.com" i.e d=example.com in DKIM header of all the server outbound mails. The ...
0
votes
2answers
676 views

How do I set up DomainKeys/DKIM and Sender ID

I have searched far and wide for a guide on how to setup DomainKeys/DKIM and Sender ID. I understand there are text records you add to your DNS, but I cannot find out how to create theses, ...
2
votes
1answer
1k views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me P=...
1
vote
2answers
1k views

postfix not reporting FROM address to opendkim

I am trying to setup an DKIM email signing for a postfix SMTP server. This server is to be used by different services on the local network. I have generated DKIM key pair, added it to my domain and ...