DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

learn more… | top users | synonyms

1
vote
2answers
99 views

Should DKIM selector names be unguessable?

The M³WAAG DKIM Key Rotation Best Practices document (pdf) recommends a "sufficiently" random DKIM selector name so that it cannot be guessed by browsing the DNS. A literal quotation: 4.3 Key ...
1
vote
2answers
401 views

How to force postfix to use ip that is configured for domain?

I want to confirm to SPF and DKIM, this requires me to send email using the IP written in the DNS record of the domain I have two domains example1.com and example2.com with two IPs 100.0.0.1 and ...
1
vote
2answers
415 views

How do I use an include statement in a TXT record?

We have a client that is using an email service that requires a TXT domain key reocrd that is over 127 characters long. I'm pretty sure BIND allows this, however we run djbdns with tinydns and it ...
0
votes
2answers
64 views

Error sending emails from a mail server relay type falling into the spam folder (using postfix)

Here I show one of the emails that come to Yahoo, which are falling directly into SPAM folder. The SPF goes smoothly, the DKIM passes without problem, even DMARK passes without problem, but just keep ...
0
votes
2answers
291 views

exim dkimproxy configuration - explanation?

I'm trying to setup DKIM on exim in a cPanel VPS. I'm going with the DKIM Proxy option since cPanel is seriously dragging its feet with the it's-definitely-coming 11.32 release. These guides here, ...
0
votes
2answers
249 views

Yahoo is sending our server's transactional email to the Spam folder, even though we have set up SPF and DKIM

Yahoo Mail is sending our server's transactional emails to the Spam folder, even though we have taken quite a few anti-spam steps. By contrast, Gmail allows the messages through to the inbox just ...
5
votes
1answer
153 views

Designating A DKIM Signer Other Than The “From” Domain

A few months ago, I implemented SPF/DKIM/DMARC for my three-person company. After a trial period, I switched our DMARC to "p=reject", so that emails are rejected if they fail SPF/DKIM. Generally, it ...
3
votes
1answer
2k views

postfix + opendkim not signing correctly. how to debug this?

EDIT: I did get a little further but all posts on my search say permissions are wrong or regenerate key but I fixed that to be 644 as well as owned by DKIM AND I keep regenerating the key but it is ...
3
votes
1answer
70 views

What is the benefit of using DKIM to sign Content Type?

DKIM has the ability to sign headers on a per-header basis. I looked at Google's headers, and they DKIM sign ContentType. What is the security benefit of signing ContentType?
1
vote
1answer
566 views

opendkim incoming not verified

I've installed opendkim with postfix on Debian Wheezy. Outgoing mail is getting DKIM signatures. The smtpd and non-smtpd milter spec is the same. Incoming mail seems not to be verified - in a ...
1
vote
1answer
216 views

DKIM Signing not working, amavisd indicates that is passes

amavisd-new testkeys indicates a pass, but mailtest@unlocktheinbox.com says that my DKIM signature could not be found? Anyone ran into this before? Anyone got any easy ways to set up DKIM signing? ...
1
vote
1answer
81 views

DKIM on postfix server but not Exchange server?

We are looking into setting up DKIM to improve email deliverability and conform better to best practices for email. We currently have two servers that can send email for a domain - one is CentOS ...
1
vote
1answer
241 views

DKIM failure when using Exim4 as an “edge transport” for Exchange 2010

I have a server running Exim 4.72 that is set up similar to the Exchange "Edge Transport" role: it forwards mail from the internet to Exchange and forwards mail from exchange to the internet. I ...
0
votes
1answer
84 views

How to setup Postfix with Opendkim to automatically sign PHP emails?

I've found that: submitted emails are signed properly (ie those sent with MUA's like Outlook and Thunderbird) command-line sent emails are signed properly emails sent with PHP, in particular case ...
0
votes
1answer
39 views

Have Postfix/OpenDKIM sign only authenticated and local origins

I'm signing email just fine, but I don't want to sign relayed email when the "From" address is one of the domains I'm signing. What's the right way to configure Postfix/OpenDKIM to sign only from ...
0
votes
1answer
123 views

DMARC is blocking email that seems like it should be allowed

This is the DMARC record we have set v=DMARC1; p=reject; rua=mailto:[redacted]@coinbase.com; adkim=r; aspf=s So we are rejecting any not match with SPF strictly, and DKIM is relaxed. Here is the ...
0
votes
1answer
106 views

How sendgrid assigning its DKIM keys when we send email from application

I was exploring about DKIM. I read an email which was sent via sendgrid and with application from remote server. My question is , how can assign the DKIM key of own server if sender id do not exist in ...
0
votes
1answer
19 views

Domain Key Entries

More BIND DNS questions. OK, my changes the the zone files are no propagating out. Now I'm having a problem with the domain key entries I'm trying to create. I'm starting by trying to set the domain ...
0
votes
1answer
252 views

OpenDKIM - verifying mail forwarded by mailing lists

I'm using OpenDKIM for verifying signed mails that are incoming to my mail server and use it as a spam addon (if dkim is broken, mail lands in Junk). However, I'm getting lot of false-positives with ...
0
votes
1answer
249 views

named.conf to include zone file and opendkim conf

I would like to separate out opendkim default.txt from zone file and to be include in named.conf instead. I'm a little bit confused on which approach I should use and which is the correct one. ...
0
votes
1answer
420 views

DKIM in Plesk with DNS managed remotely

Our primary domains DNS is managed over at Amazon Route 53, and so in Plesk (11.x) I've turned DNS off. The problem is that I want to begin using DMARC which requires both SPF and DKIM txt records to ...
0
votes
1answer
69 views

speed DKIM signing in mail server

I'm running email sending campaigns with milions of emails, and I need to sign each and one of them with DKIM. Unfortunately that's the bottleneck of the process. I wonder if I can calculate a DKIM ...
0
votes
1answer
138 views

DKIM signing having same public key

I have 20 servers hosted on orderbox DNS hosting,I have set up opendkim on all servers with signing by domain say "example.com" i.e d=example.com in DKIM header of all the server outbound mails. The ...
0
votes
1answer
73 views

Rewrite header when no dkim header for specific domains

I have been receiving a lot of mails that are "From" my domain. These mails have usually a different return path (spf passes), but have for example my email in the to and the from header. ...
-1
votes
1answer
2k views

dkim signature not present or bad format

I'm going mad with dkim-filter + postfix. My message are signed but Gmail notify me errors like "dkim=neutral(no signature)" or "dkim=neutral(bad format)" I don't know what is wrong. I've generated ...
-1
votes
1answer
489 views

Debian Unstable + Postfix 2.6.5 + dkim-filter 2.8.2 issue

I have Postfix installed on Debian Unstable, as the title states, the system is completely up-to-date, I have tried to get DKIM signatures working on outgoing mail using dkim-filter 2.8.2. I couldn't ...
3
votes
0answers
396 views

Exim 4.71 does not add DKIM signature to outgoing emails

I am trying to add DKIM to my domain, I have created a key, added the following to /etc/exim4/conf.d/transport/30_exim4_config_remote_smtp: dkim_domain = mydomain.com dkim_selector = mail1 ...
2
votes
0answers
11 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
1
vote
0answers
113 views

Postfix configuration with DKIM to send mail from multiple domains

My current setup is a Postfix installation configured with DKIM on a server with hostname prod01.example.com The server is used to send out mail on the form webshop@example.com, ...
1
vote
0answers
328 views

postfix opendkim DKIM-Signature and Domainkey-Signature

Running postfix on CentOS 6 as an edge relay for a while now, so all our outgoing mail is routed through one point with opendkim signing the mail. This works great. I was originally using ...
1
vote
0answers
175 views

Postfix + Amavisd-new as smtp-proxy (pre-queue) for inbound only, postqueue for outbound?

I am in the planning phase of building a mailserver with the following requirements relevant to my question: Use postfix, virtual users (two virtual domains) Must filter pre-queue to reject ...
1
vote
0answers
319 views

Sendmail rewriting headers after OpenDKIM signature

I have run into a problem described in section Sendmail REWRITING FEATURES on http://www.opendkim.org/README: Due to the way the milter protocol is incorporated into the MTA, opendkim sees the ...
1
vote
0answers
273 views

Not Connecting from my zimbra webmail

I have configured zimbra webmail on centos 5.5 64bit server for e-mail authentication. I have installed DKIM and dk-filter on it after installation to check authentication. I tried to open zimbra by ...
0
votes
0answers
34 views

DKIM error - no key

Im using PowerMTA and trying to get dkim to work. Im using godaddy DNS. Gmail is giving me : dkim=neutral (no key for signature) header.i=@ same thing with yahoo: permerror(no key) dig output: ...
0
votes
0answers
31 views

DKIM errors in an nontransparent system

We have a client who has their mail hosted using a local exchange and POP3 connector's to their head office, and we only have access up to the POP3 connectors. This client hasn't been receiving all ...
0
votes
0answers
42 views

Postfix+DKIM using Amazon's second private IP address

I use Amazon EC2 with 2 private IPs. I have 2 postfix instances (using multi-instance builtin support) with opendkim. Each instance works when I send email (over telnet) using the primary private IP ...
0
votes
0answers
60 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
0
votes
0answers
45 views

AWS Linux/Sendmail/dkim-milter — how to troubleshoot?

I'm trying to get Sendmail to use dkim-milter on an AWS Linux instance (similar to RHEL/Centos). I've been trying to use these directions, which are a bit out of date, but which seem to work: ...
0
votes
0answers
48 views

spamassassin not loading DKIM module

I kept noticing SA 3.3.1 giving DKIM invalid even though my webmail system performs an additional check using OpenDKIM that does return valid for some. I ran sa-update -D and got this: module not ...
0
votes
0answers
67 views

OpenDKIM: no MTA name match (host=myhost.mydomain.com, MTA=myhost.mydomain.com)

i'm using OpenDKIM together with Postfix MTA and while DKIM solutions is working well but in /var/log/mail.log i can see opendkim is complaining about OpenDKIM: no MTA name match ...
0
votes
0answers
185 views

DKIM SPF passes but mail goes to Spam Received: (from abc@localhost)

I am facing an issue with the DKIM setup. We are sending newsletters which are going to spam in gmail. The dkim & spf passes. Even the reverse dns is setup properly. Below is a copy of mail ...
0
votes
0answers
268 views

EXIM4 sent mail sometimes rejected, always put in spam. DKIM and SPF pass + reverse DNS

Recently I've been seeing some instances of Your access to this mail system has been rejected due to the sending MTA's poor reputation. in my maillog and have noticed that my emails have been getting ...
0
votes
0answers
142 views

SPF and DKIM breaking BlackBerry BIS

I set up DKIM and SPF on our domain that uses Google Apps to host email. A few hours later, the BlackBerries that were connected to it were not letting us send out emails quoting "General Failure". ...