I am using qmail and libdkimtest to sign outgoing emails. The setup is almost exactly as per this tutorial (http://patchlog.com/security/qmail-and-dkim/).

Emails I send out have a signature added, and it looks fine to me however, spamassassin reports:

    *  0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
    *      valid
    *  0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

I've added the DNS records exactly as many tutorials suggest. I've tested the DNS with http://www.sendmail.org/dkim/checker and it doesn't report any problems, and displays the public key correctly.

I would like to get more detailed errors in order to figure out why spamassassin says it isn't valid.



Send an email from that server to this address autorespond+dkim@dk.elandsys.com it will give you a report on why the verification is failing.

| improve this answer | |
  • This link was really helpful. In just a few minutes, I was able to solve my issue. My DNS lacked a TXT record for_adsp._domainkey with a value of dkim=all. Had no idea that this was required to make DKIM squeaky clean for some mail checkers. – Highdown Mar 2 '18 at 19:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.