Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dkim]

DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a key retrieved from DNS.

0
votes
0answers
14 views

DKIM signing keeps returning “no key for signature”

EDIT Oh I forgot to mention... I'm using this hmailserver guide to do my signing... Question I've seen this answer and triple checked the keys and setup on my client's domain. So the information I'...
1
vote
1answer
55 views

dkim=temperror (no key for signature) then dkim=pass

I published a DKIM record for my niceoldteacher.com domain that is hosted by fatcow.com and sent an email to one of my gmail accounts to see if DKIM was working. Although the header summary for the ...
0
votes
0answers
14 views

DKIM “default” selector

I often see DKIM configuration guides using default as the selector. Is this a special selector or it is just a convention to use this if you only have one mail server? In other words, if I use the ...
0
votes
0answers
13 views

Why DKIM validation fails for yahoo, but pass for others?

Why does the DKIM validation for my mailserver fail for Yahoo but nor for others ? I saw this question, but I don't think it's the same issue and the answer was not helpful to me. MxToolbox gives no ...
0
votes
1answer
25 views

OpenDKIM / Postfix sign console-sent mail, but not from a mail client / SMTP

I have Postfix running on a Debian 9 machine, and installed opendkim (both from the Debian repositories). The milter socket/connection is inet:localhost:8892, and the iptables firewall allows that ...
0
votes
1answer
48 views

Debug DKIM on MacOS X

I am setting up DKIM on MacOS X/Server using Amavis-new. Everything seems ok, by when I try to test it using sudo -u _amavisd -H amavisd -c /Library/Server/Mail/Config/amavisd/amavisd.conf testkeys ...
-1
votes
0answers
30 views

DMARC and DKIM Authentication-Results for forwarded mails with multiple DKIM signatures

I am kinda lost in here, so please, bear with me. I have trouble with getting DMARC implementation right with opendmarc. When there is forwarded mail that is correctly signed by original sender, dmarc ...
2
votes
1answer
22 views

DKIM on aliased domains with rspamd and postfix

I'm having trouble DKIM signing my outgoing emails when they're sent from an alias domain. That is, when I'm authenticated with user@domain1.com sending as user@domain1.com or somebodyelse@domain1.com ...
0
votes
0answers
138 views

RSPAMD + DKIM Signing: How to be able to use a single DKIM Key for multiple domains?

I was able to setup a Single DKIM Key for multiple domains with OPENDKIM by using their KeyTables and SigningTable. But since the company started to use RSPAMD, I could not use OPENDKIM along with ...
2
votes
1answer
23 views

8bit to Quoted-Printable encoding in Exim

Is it at all possible, and how, to configure the Exim4 mail server to convert outgoing messages (or message parts) from 8bit encoding to Quoted-Printable (or Base64, although I'd prefer QP) before ...
0
votes
2answers
92 views

Setting up exchange 2019 with DKIM on Azure VM

I wanted to setup and configure my first exchange server on an Azure VM. I presume I need to forward the MX records for my domain to the Azure VM? Do I need to setup Active Directory on this new VM i....
0
votes
0answers
76 views

DKIM - many subdomains without multiple txt records

I've been having trouble with opendkim, figuring out how to best create records for multiple subdomains. I've tried using wildcards to cover all of the subdomains and wasn't able to get it working. I ...
0
votes
1answer
21 views

OpenDKIM signing conditions

Is it possible to use conditions for signing outgoing messages with OpenDKIM? It should only sign outgoing messages if the selector exists in DNS.
0
votes
1answer
54 views

Dkim record fails - A public-key (p=) is required

I setup dkim record using following tutorial. But when I check the mx records using googleapps toolbox and dkimcore cheking tool it gives error google says dkim is not setup, dkimcore says A public-...
0
votes
0answers
14 views

Adding AWS SES DKIM for domain using G Suite

My company has a domain acme.com with multiple subdomains running various AWS servers which are accessible via subdomains like client1.acme.com and we're also using G Suite for email. I'd like to ...
0
votes
0answers
35 views

If mail from “me” isn't DKIM signed, reject it

I am getting DMARC reports stating that an unauthorized IP is claiming to be me (our domain is in the headers). Looking at this section of the DMARC report, it occurs to me that I should be able to ...
1
vote
1answer
571 views

Valid DKIM but “body hash did not verify” error on Outlook / Hotmail / Live?

Why do I get dkim=fail (body hash did not verify) on Outlook / Hotmail / Live when I have a valid DKIM setup in place? I've made sure that my SPF, DKIM, DMARC records are set up correctly and the ...
0
votes
1answer
61 views

How can I create a DKIM Record?

I am not sure how to add a DKIM Record to my mails/server. Do I only have to generate it from here -> https://dkimcore.org/tools/keys.html and add it to my DNS?
-1
votes
1answer
45 views

I have set the DKIM record but my emails is not signed?

I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm ...
0
votes
1answer
24 views

SPF and DMARC protection

Today while working at my company, we saw allot of automatic reply emails coming into one of our group inboxes (i.e. info@company.com). We suspect that this email address is being used in a phishing ...
0
votes
0answers
18 views

Will a single domain without DKIM affect mailserver IP reputation?

Just something I was curious about with mailserver reputation. Let's say I have a mailserver at IP 1.2.3.4 that handles emails for a couple of domains. If I have DKIM installed for some of these ...
0
votes
2answers
101 views

DKIM in Exchange Server 2010

I need to generate DKIM public/private keys for Exchange Server 2010. https://www.emailarchitect.net/domainkeys/kb/dkim_exchange_2007_2010_2013.aspx I have run the DKIM Installer but it was hanging ...
1
vote
2answers
60 views

SPF and DMARC - is spf policy used?

I understand how SPF is involved with DMARC alignment, but one thing I can't get clear: is the SPF policy (-all or ~all) used in DMARC? Or does DMARC merely use the IP ranges? The issue is, that as ...
-1
votes
1answer
152 views

Emails go to spam ( Reverse DNS is set , DKIM pass , SPF pass , DMARC pass ) [duplicate]

It's been now 3 days that I am struggling with configuring my emails to go to the inbox. I have a VPS server at OVH and a domain name. I have configured everything in virtualmin with OpenDKIM and ...
1
vote
1answer
48 views

DKIM : Which domain is considered?

DKIM verifies the domain of an e-mail sender, but... What "domain" does it check? The "domain" of the MAILFROM field of the SMTP envelope ? The "domain" of the FROM header of the message ? The "...
6
votes
3answers
1k views

Why is my opendmarc failing pretty much everything that comes through?

I have this domain for which I set up SPF, DKIM, and DMARC stuff. Let's pretend the domain is example.com which has the following entries in its DNS zone: example.com. 600 IN MX ...
-2
votes
1answer
49 views

where should i add dkim records when using custom name servers?

I have recently setup mail server on ubuntu14.04 using postfix, dovecot. I am very confused about adding dkim records. Every tutorial i have followed is saying i should add dkim at domain registrar ...
1
vote
0answers
145 views

opendkim on lokal net not working

I have a assignment in school to setup bind9, postfix, spf, dkim and dovecot on the same machine for the address mcduckcorp.duckburg.cali on a Debian 9 OS. I have managed to setup bind9, postfix and ...
0
votes
1answer
109 views

DKIM public key & DKIM from DNS are the same but don't match because of spacing

Please take a look at this picture of mail-tester.com saying that Your DKIM signature is not valid. As you can see, the DKIM signature and public key are identical in term of text (characters) but ...
1
vote
1answer
137 views

Can one bypass DMARC policy DKIM requirements simply by not using DKIM or by using an SMTP envelope with a valid DKIM for the envelope from domain

Am I right to say that DMARC has no way to say "all emails must be signed". My understanding here is that I can specify that I want DKIM to be either lax or strict - which I understand to mean that, ...
-1
votes
2answers
599 views

SPF and DKIM configuration Ubuntu 18.04 fails

I have been following this tutorial from DigitalOcean. I have followed every detail but nothing seems to work as expected. Assuming that my FQDN is the following: mydomain.com. Here are my details: ...
0
votes
1answer
530 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
2
votes
2answers
120 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
2
votes
0answers
38 views

Email messages arrives without DKIM, and as spam, when I send from a specific network

In a specific case, when I send an e-mail message through thunderbird, the message arrives without the DKIM key and identified as spam at the source: X-Virus-Scanned: amavisd-new at mailserver....
1
vote
0answers
111 views

DKIM - how to account for different hostnames for the mail host (sendmail, FreeBSD 10.3)

I'm trying to use DKIM on a FreeBSD 10.3 box using "stock" sendmail. I followed this tutorial: https://www.dan.me.uk/blog/2016/06/01/add-dkim-signing-to-freebsd-servers and now DKIM "works" -- ...
1
vote
1answer
80 views

How mailchimp can sign email changing the domain and from header?

I've configured a SMPT server using postfix, dovecot, opendkim, openspf, openssl etc... I'm trying to figured out how mailchimp can send mails signed by their servers and deliver to recipients without ...
0
votes
1answer
299 views

Yahoo Rejecting Email - dkim=temperror (multiple keys)

Sorry this is long, I wanted to provide all the information I could. We have a web based application that sends emails to people that request information. Just recently Yahoo has been rejecting our ...
0
votes
1answer
225 views

dkim=neutral (bad service type)

I am trying to set up the dkim for an email and I am getting this error message on gmail: dkim=neutral (bad service type). However on Hotmail it is passing. I have not found any information on this ...
0
votes
0answers
127 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
1
vote
0answers
261 views

Yahoo dkim=permerror (bad sig), gmail dkim=fail

We are using postfix(with opendkim) to send registration information from our site. When the information sent to gmail it goes to inbox but it shows dkim=fail and in Yahoo it always goes to spam ...
1
vote
2answers
119 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
2
votes
2answers
596 views

DMARC and DKIM alignment with multiple DKIM signatures

If an email contains multiple DKIM signatures as it's forwarded, how does DMARC process the DKIM alignment check? Does ANY passing DKIM signature d= parameter have to match Header From? or Does the ...
-1
votes
1answer
315 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
0answers
205 views

DKIM Errors with gmail - dkim=neutral (no key) and other issues

I'm trying to upgrade my PHP DKIM from Sha1 to Sha256 and getting errors. I tried many things (as follows), basically gmail fails to authenticate my signature with all sorts of errors (as follows). My ...
1
vote
1answer
2k views

opendkim no signing table match for no signature data

I got an error when I try to install and config opendkim : no signing table match for 'contact@domain.com' no signature data opendkim.conf : # This is a basic configuration that can easily be ...
0
votes
0answers
57 views

Why would I not have 100% DKIM alignment when sending via AWS SES?

I've set up a DMARC report using https://dmarc.postmarkapp.com/ – we've been getting 100% DKIM alignment with our mails sent via AWS SES for months, but this week's report shows a significant drop to ...
1
vote
1answer
453 views

Unable to resolve DKIM TXT record

I've installed and configured OpenDKIM and SPF TXT records on Ubuntu 18.04 LTS. However, I'm unable to resolve my DKIM TXT record. I'm running NSD as my DNS and configured as mydomain.com.zone. My ...
0
votes
3answers
1k views

Is it possible to find a list of all DKIM keys for a domain?

a DKIM-record is identified by its selector, which might be default, dkim or something else alltogether (and there might be multiple). When making sure that an e-mail's content is valid, the DKIM ...
0
votes
0answers
233 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
579 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...