I'm having external ip and ubuntu server with exim4.71 and bind9. I'm trying to set valid dkim entry to send mail for gmail

Here are my configuration files: bind9:

_domainkey.example.com.       IN      TXT     "o=-;"
mail._domainkey.example.com.  IN      TXT     "v=DKIM1;k=rsa-sha256;p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMDO8xXc3fMjQnWs6ejxTsrMa4xvb0470b2wCIbx1/790huhBr1386mkvvzeTpDDwkFmOZWXnJLw+Qeh4p/rkNQ7AVCk2uZQ+Kwy+jxM17QdZaDxSY9U1HYUFXC8BKAUYwIDAQAB"

I've got this results from check-auth@verifier.port25.com

Summary of Results
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham

Any idea what the problem is?

from yahoo:

from=example.com; dkim=fail (unknown key type)

ive change k=rsa-sha256 to just k=rsa and now

from=example.com; dkim=pass (ok)

This also helped with gmail :)


v=DKIM1;k=rsa-sha256;p=... --> v=DKIM1;k=rsa;p=....

Question solved

  • Using dkim-filter or dkimproxy? Can you add t=y to both TXT records, let TTL time out and retry? Also, if you can publish the full headers (with hidden hosts/ips) from google mail? – 3molo Apr 5 '11 at 7:52
  • 2
    t=y its just a test mode. Ive managed to solve this. Ive made a mistake in key declaration. just put k=sha and thats all. – MealstroM Apr 5 '11 at 7:54
  • Please post an answer and mark it accepted - that's the correct way to do it on this site. – user9517 supports GoFundMonica Apr 5 '11 at 8:18
  • @lain thanks. Ill be able to do this in 12 hours. – MealstroM Apr 5 '11 at 8:41

Solution: change dkim field in BIND9 zone: from v=DKIM1;k=rsa-sha256;p=... to --> v=DKIM1;k=rsa;p=.... rsa-sha256 or rsa-sha1 doesnt work for me :(

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.