New answers tagged

2

There are two canonicalization algorithms specified in the DKIM specs. The "simple" algorithm doesn't change the header at all, an the "relaxed", besides converting the header field names to lowercase, only affects white space. Because of this, I find it very unlikely to have something to do with OpenDKIM. I looked into RFC 5322. Although 'Charlie C' ...


0

I have finally figured out why I was seeing these DMARC reports about properly signed email sent from my domain. As I mentioned in the question, my DMARC record was "v=DMARC1; p=none; pct=100; sp=none; rua=mailto:postmaster@example.com;" By default, Google apps will not deliver emails sent to postmaster@example.com to any of your mailboxes. In order for me ...


0

Gmail is able to successfuly detect authentication but yahoo fails. Why is this happening? That is not that is happening at all. Quote from the Gmail header you posted: ... dkim=fail header.i=@anildagia.com; dmarc=pass .... As you can see both Gmail and Yahoo fail in verifying the DKIM signature. The only difference is that Gmail is also doing DMARC ...


0

Hard to tell without seeing the headers as they appear in the received messages, but I'd suggest comparing the original headers with the ones which arrive at GMail and Yahoo. Specifically, the ones named in the DKIM Header (Content-Type:MIME-Version:Message-ID:Date: Subject:To:From:Reply-To). You may wish to cut the headers signed down to the minimum and see ...


2

SPF doesn't use certificates, so you have misunderstood mechanisms used by SPF to stop the use of forged "from" addresses. SPF is based on set a DNS TXT record in which you specify simple policies of what hosts can send mails using your domain name like this: v=spf1 mx a:pluto.example.net include:aspmx.googlemail.com -all You are probably confused with ...


0

For DKIM records, if you have received a DKIM-signed email from that domain, look at the DKIM-Signature header line(s). From the spec: All DKIM keys are stored in a subdomain named _domainkey. Given a DKIM-Signature field with a "d=" tag of example.com and an "s=" tag of foo.bar, the DNS query will be for foo.bar._domainkey.example.com. So in this ...


0

Using Windows built-in tool nslookup Open Command Prompt (cmd.exe) Enter nslookup Enter set type=txt Enter _dmarc.somedomain.org, replace somedomain.org Example: C:\Users\user>nslookup Default Server: localdns Address: 192.168.1.1 > set type=txt > _dmarc.somedomain.org Non-authoritative answer: _dmarc.somedomain.org text = "v=DMARC1; ...


3

You could give this package a try instead: libmail-dkim-perl One of the walk-throughs linked in the Spamassassin documentation points out a hint that I would recommend to follow: "You should NEVER need to use CPAN on a RPM or DEB based Linux distribution."


0

This happend because of the missing perl module Mail::DKIM. Without that, every mail with dkim signature will fail the verification. Even those with correct signature. You can find futher information about it here. A simple fix is to install the missing module via cpan.


1

Add the the server to your existing SPF record with something like ip4:<server ip address> If you want DKIM signing of the messages, you can use OpenDKIM, a popular milter, and update your DNS with the selector. You probably don't need to edit anything in your DMARC record, but if you are unsure, you may find some of these resources useful at the ...



Top 50 recent answers are included