Questions tagged [dkim]

DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a key retrieved from DNS.

Filter by
Sorted by
Tagged with
0 votes
2 answers
211 views

Why did this incoming email get through Office 365 spam filters with a DKIM fail? What policy do I need to "tune"?

We use Office 365 mail, I got this spam email this morning so I checked the header to see if there was anything I could do. Here is the header with our receipt domain removed Received: from ...
user avatar
0 votes
0 answers
36 views

DKIM_INVALID in Spamassassin only for emails sent from other emails in the same server

I have postfix/dovecot running with spamassassin on Centos. PROBLEM: The VPS acts as a mail server Spamassassin edits the email subject and adds [SPAM} Ms. Outlook on Windows moves those emails to ...
user avatar
  • 329
1 vote
0 answers
42 views

Why are my mails failling body hash verification?

Since a few weeks, mails sent via my mailserver at the-grue.de fail dkim authentification. That's very strange, because I'm not at all aware of any changes on my part... mxtoolbox checked the mail, ...
user avatar
2 votes
1 answer
68 views

(Why) Would email servers stop sending DMARC reports because of DKIM?

I have a personal email server I've been running for years; very seldom has there been a problem with sending mail and so I've never really got up to speed with things like SPF, DMARC, and DKIM. ...
user avatar
1 vote
2 answers
42 views

Does this report mean someone is attempting to send emails fraudulently or that I have things configured wrong?

Pretty new to spf/dkim and dmark. After setting this up just this morning I already got a report on a new website. Our service eamils our users via sendgrid and the rest of the emails are sent from ...
user avatar
  • 877
-1 votes
1 answer
42 views

How long should it take for google to authenticate a DKIM TXT DNS entry?

Does anyone know how long it takes for google to authenticate a DKIM TXT DNS entry? The entry sits in AWS Route53 and the record is correctly saved, the record is only on a 10 second TTL. Google seems ...
user avatar
  • 877
1 vote
1 answer
34 views

How can I use E-Mailrelay to implement DKIM?

I am trying to add DKIM to an existing windows server which is currently using IIS SMTP for outgoing mail. It seems like this could be done by using E-Mailrelay. Unfortunately I could not find any ...
user avatar
-1 votes
1 answer
47 views

Setup bind9 dns for setup DKIM and SPF records [closed]

Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
user avatar
  • 1
1 vote
1 answer
59 views

How to replace "via amazonses.com" with my apps branding "via example.com" for the email identities in AWS SES?

So in SES - there are two ways to verify identities as I can see: Email identities Domain identities With domain identiies - it is easier to fix the "signed-by" and "mailed-by" ...
user avatar
  • 125
8 votes
3 answers
917 views

Does SPF provide benefits along with DKIM+DMARC?

I have a domain I send emails from via Mailchimp and Google. I've set up DKIM for both of them and added a DMARC record too (for testing atm). I collect reports for DMARC failures and the overwhelming ...
user avatar
0 votes
0 answers
25 views

Why a postfix relay server doesn't sign relayed massges with DKIM?

I have postfix mail server on ubuntu 18, which act as a relay email server for a couple virtual machines and as an imap/smtp server for our colleges. If I send an email from a mail client with smtp ...
user avatar
2 votes
1 answer
194 views

Is having DKIM signatures not matching worse than not signing DKIM at all?

If I sign mail with a private key which does not have a corresponding public key in the DNS, is this worse (for deliverability), than not signing the message at all? I know will be down to the ...
user avatar
  • 448
3 votes
3 answers
297 views

How to set up DNS settings with a domain in the middle for DKIM and SPF?

I am working on a tool that helps the users send emails. I plan on using an MTA (Mail Transfer Agent) in the back end like AWS-SES or Sendgrid etc. In order for the emails to arrive successfully in ...
user avatar
  • 125
-1 votes
1 answer
89 views

OpenDKIM - can't load key

Hi I am trying to setup OpenDKIM, but it keeps complaining it cannot access the keyfile. I have double checked permissions and ownership, which is set to user opendkim & group opendkim with rw ...
user avatar
  • 3
0 votes
0 answers
49 views

postfix to gmail silent delivery failure

With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've ...
user avatar
5 votes
2 answers
923 views

SPF/DKIM/DMARC for Gmail "Send mail as" via smtp.gmail.com on external domain

Since "Google Apps" / "Google Apps for business" / "G-Suite" / "Google Workspaces" free tier is being discontinued, I need a solution to migrate my ~30 extended ...
user avatar
  • 159
2 votes
2 answers
158 views

DKIM: Can I safely add a DomainKey policy record without breaking existing email?

I need to setup DKIM to validate an email provider we are using. In the provider's documentation, they require us to add two records, a selector record and a policy record, like this: selector....
user avatar
0 votes
0 answers
115 views

AWS SES subdomain email

Can I add CNAME and MX records to a subdomain hosted outside Amazon to work with AWS SES? I have bill@example.com and jill@example.com. I would like to leave bill as is while transferring jill over ...
user avatar
0 votes
1 answer
114 views

How can it be possible dkim fails whereas spf pass

I have set up a postfix which sends emails. I have configure spf, dkim and dmarc (with p=none). I have checked with mail-tester: spf and dkim work fine. I have set up a dmarc rua in order to receive ...
user avatar
  • 415
0 votes
0 answers
46 views

Is the a Postfix milter supporting dkim with IDN and UTF8

I use postfix mailserver with enabled SMTPUTF8 and some IDNs, before I used IDNs I used OpenDKIM, but OpenDKIM crashes if I use the IDN in utf8 form. Then I tried pyopendkim. Then I tried dkimpy-...
user avatar
0 votes
1 answer
114 views

Amazon SES - Domain Verification - Does it expire?

I read the documentation about verifying domains in Amazon SES, and I don't understand - how long does the domain verification last and does it expire? What happens if I remove the DNS settings after ...
user avatar
  • 821
2 votes
1 answer
71 views

DKIM for subdomain in Cloudflare

I have example.com configured cPanel and I do not use it as mail server. I have created new subdomain in Cloudflare called mailer.example.com and installed Virtualmin on new Ubuntu server with ...
user avatar
5 votes
1 answer
562 views

Why doesn't dkim sign the letter?

I have configured DKIM: Dec 27 11:10:03 mailer opendkim[378]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf) Dec 27 11:10:10 mailer postfix/postfix-script[551]: warning: symlink leaves ...
user avatar
  • 161
0 votes
1 answer
75 views

Does Postfix add the DKIM header before or after a message is queued?

The Postfix configuration has been changed to add a DKIM header when sending a mail. But Postfix is currently in the stop status, and mailq shows that new mails have been queuing in the meantime. Will ...
user avatar
  • 5,378
3 votes
1 answer
501 views

How is this email passing DMARC?

Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.) This is disturbing, as it shows as "from foo.com", yet the sender ...
user avatar
0 votes
1 answer
38 views

How do I add individual mail-sending websites to my SPF record?

My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:...
user avatar
  • 1
1 vote
1 answer
234 views

Added dkimproxy to OpenSMTPD ... mail loop when sending to my own domain

I have a nicely working OpenSMTPD configuration and I added dkimproxy to it. Everything is working nicely and mail-tester, etc., all report that I have proper DKIM signing and my email score is 10/10, ...
user avatar
1 vote
1 answer
209 views

Why do I get DMARC aggregate reports with no reported failures (G Suite + Amazon SES)?

Domain: franzoni.eu Such domain leverages G Suite (grandfathered free version) for receiving mail, but for various reasons (I prefer not to create users for M2M SMTP on G Suite, and I cannot use SMTP ...
user avatar
1 vote
1 answer
412 views

Why does spf fail in DMARC report from Google?

I recently received a DMARC report from Google alerting me of a few SPF failures with mail originating from IP addresses belonging to Amazon SES. A sample record is as follows (I have replaced our ...
user avatar
0 votes
0 answers
48 views

DKIM not aligned for email identities

We have several email addresses which are forwarded to a main email address. Then when we reply to these emails, we use RoundCube Identities (which I guess just spoofs the "from" header?) ...
user avatar
0 votes
0 answers
252 views

Create a DKIM key to provide to a 3rd party so we can send as them?

We use o365/Exchange Online. All our SPF and DKIM configs are good for our domain (including 3rd party senders). Say we have a partner who has domain XYZ123.com (with their own mail servers) and they ...
user avatar
  • 1,892
0 votes
0 answers
24 views

Authorized domain in exchange 2010 would not send email to internet but internally to main domain

An authorized domain authorized-domain.tld in exchange 2010 with main domain main-domain.tld would not send email to internet but internally to main domain. Reproduced / describde scenario: User ...
user avatar
4 votes
1 answer
951 views

1024 or 2048 bit keys for DKIM?

Referencing this: https://crypto.stackexchange.com/questions/72297/recommended-key-size-for-dkim What I get from this is (at the time) DNS providers (usually) allow for up to 1024 bit keys but not ...
user avatar
2 votes
1 answer
200 views

SpamAssassin: custom rules and score

For my mailserver, i want do add some custom rules and scores for spamasassin DKIM and SPF checks. Currently i use following custom settings: score DKIM_SIGNED 0 score DKIM_VALID -1 score ...
user avatar
2 votes
0 answers
118 views

How to diagnose opendkim RSA signatures

I'm having an issue where my DKIM signatures are failing everywhere. There was a question on this here, but the original poster answered his own question, and the answer seems unrelated. After some ...
user avatar
6 votes
1 answer
2k views

Mail from Teams forwarded to Gmail marked as spam due to DMARC failure

When I write a chat message in Microsoft Teams the receiver gets an e-mail notification on her Office 365 account (receiver@htlvb.at) when she is offline in Teams. The receiver set it up so that all ...
user avatar
0 votes
1 answer
96 views

SPF/DKIM setup for a registrar's email forward

I have a number of domains with a registrar with straight forward forwards to another email address. The system has worked flawlessly for a lot of years over a lot of domains but recently I created a ...
user avatar
2 votes
1 answer
579 views

Is DKIM/ARC working properly on my Mailman server?

I've set up a Mailman 3 server with Postfix. I've configured Postfix to add DKIM headers using OpenDKIM and a test email from that server to a Microsoft-hosted email address suggests that DKIM is OK: ...
user avatar
1 vote
1 answer
240 views

Amazon SES - Domain Verification Pending

I am trying to setup Amazon SES on my Route53 domain (writeurl.com). The domain verification status remains at pending verification and does not proceed. The following nslookup command does not show ...
user avatar
0 votes
2 answers
71 views

Doubts about DKIM verification (RFC6376)

Good morning, https://www.rfc-editor.org/rfc/rfc6376#section-5 reads: "Survivability of signatures after transit is not guaranteed, and signatures can fail to verify through no fault of the ...
user avatar
1 vote
1 answer
75 views

SPF/DKIM and sending emails from parent domain

I'm trying to understand how apps such as greenhouse.io configure DNS for delegating email sending. In short, assume I am a SAAS provider saas.com and my customer is customer.com. I've seen that it is ...
user avatar
0 votes
1 answer
2k views

why is this DMARC failing verification?

I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3). * Your DKIM signature is valid * Your message failed the DMARC verification A DMARC policy ...
user avatar
  • 103
2 votes
0 answers
400 views

Google G Suite DMARC + SPF + DKIM for user domain aliases fail Google Admin Toolbox CheckMX

I have set up the above in my Google's old G-Suite account for a User Domain Alias but am still getting two warning messages: https://webcoder.co.uk There were some non-critical problems detected with ...
user avatar
1 vote
1 answer
137 views

Configuring DKIM using DNS and hosting on VPS

I'm using Mail Enable on my VPS and have copied the generated DKIM (see screenshot 1) to my DNS. (yes, I've restarted the VPS already): Now my DNS settings are configured at hosting company A, and ...
user avatar
  • 197
0 votes
0 answers
65 views

Incoming DKIM verfication check working but not rejecting

I have SPF, DMARC and DKIM configured for my mail server (postfix) on a CentOS 7 OS. Outgoing mail is getting signed as normal. All email check sites says my stuff are secured and working great but ...
user avatar
-1 votes
1 answer
42 views

Is it possible to host one TXT record for a domain on a different server, and leave all of the other DNS information intact on the first server?

I am running a business site on a computer with a managed hosting company. Everything is working fine, until I tried to establish DKIM verification for emails sent from the server. This required ...
user avatar
0 votes
2 answers
159 views

DKIM on subdomain hosted by domain.com, and auto-generated DKIM key

I've read a few different threads on here and have tried them out, but they don't seem to be working for me, so I'm hoping one of you awesome people can help me out. Forgive me, but this will be a ...
user avatar
0 votes
1 answer
588 views

DMARC appears to fail, multiple DKIM signatures with one matching the from address

I am using a free outlook account. In the outlook account management portal I have added an alias for my custom domain (alias@mydomain.website). With this I am able to send mails from this alias, ...
user avatar
3 votes
1 answer
616 views

Sendmail authenticating with DKIM but Roundcube is not authenticating

So I have set up the mail server, Roundcube, and Sendmail both work as expected. but many of my emails were going to spam in Gmail and others, so I was setting up the DKIM auth and it was successful. [...
user avatar
0 votes
0 answers
208 views

DMARC, DKIM, or SPF? Emails going into quarantine

I have never had to deal with DKIM, DMARC, or SPF records before; however, our SPF record is full (10, Cloudflare) and I have a vendor whose emails aren’t making it to our mailboxes. I made ...
user avatar
  • 1

1
2 3 4 5
12