Questions tagged [dkim]
DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a key retrieved from DNS.
595
questions
0
votes
0
answers
37
views
Error Configuring DKIM on Bind BIND 9.9.4-RedHat-9.9.4-61.el7_5.1 (Extended Support Version)
I'm trying to configure a DKIM record on my DNS Server running BIND 9.9.4-RedHat-9.9.4-61.el7_5.1 (Extended Support Version), but I'm getting the following error:
10:36:40 ns1 named[14663]: db.domain....
0
votes
2
answers
75
views
Why does DMARC fail for forwarded emails from this particular domain when it passes for all other domains?
I run a virtual mail server that forwards emails to my domain to a Gmail address, and I use PostSRSd to rewrite the addresses. For example, if someone sends an email to john@mydomain.com, my mail ...
- 311
-1
votes
1
answer
40
views
DKIM on GoDaddy shared hosting
I'd like to setup a DKIM record on GoDaddy shared hosting with cPanel (I don't want to move the DNS server). Normally cPanel makes creating DKIM records trivial, but in cPanel on GoDaddy shared plan ...
- 1
-4
votes
1
answer
73
views
OVH DKIM Record Not Found
I set up a DKIM Record on my OVH VPS recently.
The ultimate record generated is as follows (public key overwritten):
v=DKIM1;g=*;h=sha256;k=rsa;s=email;p=...
- 101
0
votes
0
answers
28
views
Sendmail Partial Delivery On Some Emails
I have three mail users. Each successfully send and receive mail.
There is a single repeated problem email, a Web Form Notification sent from an Amazon server which is sent to all three mail users. ...
- 179
0
votes
1
answer
363
views
DKIM fails when users forward Hotmail to Gmail
I use AWS SES for sending mail and CloudFlare for DNS. I set up DKIM following this tutorial. It works well.
When a user provides a hotmail.com address and forwards it to Gmail, I receive an email ...
- 239
0
votes
1
answer
50
views
DKIM and how it relates to DMARC reports
I've been tasked with setting up DKIM, SPF and DMARC for a business. I come from more of a development background, so as a result, I've been a bit confused on how to interpret the DMARC reports I'm ...
- 101
0
votes
1
answer
72
views
opendkim-testkey: key not secure (file permissions are good and TrustAnchorFile config setting is set)
If I run sudo opendkim-testkey -d mydomain.com -s selector -vvv, I get
opendkim-testkey: using default configfile /etc/opendkim.conf
opendkim-testkey: checking key 'selector._domainkey.mydomain.com'
...
-1
votes
1
answer
95
views
DNS Records - CNAME
Quite newbie, so sorry any unconnected data. I am creating a DKIM and SPF records to emulate DMARC as a workaround. An external vendor of us, want to send emails under our domain using a subdomain.
I ...
- 105
0
votes
0
answers
48
views
Configurating DKIM and SPF, key not secured
On a Ubuntu 20.04 VPS, installing opendkim via
sudo apt install opendkim opendkim-tools proceeds as expected, following the steps provided here.
However, upon testing, while e-mails get sent in ...
- 207
0
votes
0
answers
148
views
postfix configuration to prevent bounces when relaying to 3rd party (e.g. src -> my@work -> my@gmail)
i have an active mail relay that is using aliases as a main tool,
at some point we started to get bounces for some emails.
Source: somerandomsenderdomain.com
Destination: myemaildomain.com
...
0
votes
3
answers
98
views
How to generate separate autoreply warning from postfix to senders not using DKIM?
Antispam/phish efforts with DKIM and SPF are weak if they're not widely enforced. I can't turn on strict no-DKIM rejection or emails will be lost, but there should be some penalty for domains not in ...
- 220
0
votes
0
answers
133
views
DKIM and sending email on behalf of many domains - explain it to me like I'm a dummy
We run a server that provides a service for a few hundred customers, and there's a feature that allows them to generate some automated emails which go out to various colleagues and external partners. ...
1
vote
1
answer
103
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 33
0
votes
1
answer
240
views
DKIM E-Mail verification - prevent receivers from accepting unsigned emails?
I have set up SPF, DKIM and DMARC in my domain (to the best that I can figure out), but I still can send spoofed emails - without a DKIM signature - and they are accepted (at least when I test with ...
- 2,622
3
votes
2
answers
382
views
Generate DKIM for Gmail Free Account
I am using Gmail SMTP with wordpress to send mail with my custom domain (user@example.com). Emails are successfully sent but always land in spam folder in every webmail provider (Eg, Gmail, Rediffmail,...
- 169
0
votes
0
answers
433
views
How to correctly configure OpenDKIM with Postfix on Debian 11?
The desired settings are to create a multi domain mail server.
This is my main domain example.com and this is my subdomain: mail.example.com
Taking the rDNS as the following verifications:
hostname -f
...
- 101
1
vote
1
answer
143
views
I setup DMARC p=reject on server but now I can't send via gmail to gmail (using server email From address)
Did I shoot myself in the foot ?
I mainly use gmail to send and receive emails. Support etc. My default 'send email as' profile is not the gmail address itself but an address on my server (also the ...
- 113
1
vote
0
answers
302
views
Set SPF to send email using Gmail
(Disclaimer: I totally suck at being a sysadmin)
I am sending email for a domain using Gmail. The domain is partyboatcharters.com.au (I hope I am allowed to put domains here). Gmail is configured to ...
- 759
0
votes
2
answers
52
views
Should e-mails signed with another domain's DKIM key be treated as spam?
Every now and then I browse my spam folder (for science!). Recently (after adding DKIM Verifier plugin to my MUA) I noticed that some e-mails have valid DKIM signature, but the Verifier points out ...
- 198
0
votes
0
answers
81
views
Sending emails via a mailing service with a sender whose domain I don't own
Let's suppose I own the email address luis@gmail.com (the real one is not gmail, but for the purposes of this example it will do) and I want to send emails via a service similar to SendGrid or Mailgun ...
- 101
1
vote
2
answers
135
views
Should we enhance DMARC to allow aligned DKIM enforcement?
Currently, DMARC only requires aligned DKIM or SPF.
However spoofing SPF is relatively simple for an experienced hacker:
You should only control a single IP address in the often large SPF range of e-...
- 111
1
vote
2
answers
123
views
I don't understand DMARC reports regarding my policy
My DMARC settings seems to not work as expected.
First, a few things to note:
The domain is mydomain.com (not the real one obviously) ;
The domain and mail provider is gandi.net ;
I use Amazon SES to ...
- 115
0
votes
0
answers
238
views
Align DMARC and DKIM header with Amazon SES
I've setup a new account using Amazon SES and Sendy running on EC2 and hosting the domain all on the same account.
I've setup SPF, DKIM with CUSTOM FROM ADRESS via Amazon EasyDKIM and DMARC validation ...
- 1
1
vote
3
answers
231
views
How destination mail server can know the DKIM selector
It is possible to set a "subdomain" in DKIM DNS record name.
This "subdomain" is called a selector. It allows to have multiple DKIM keys for the same domain.
There is something I ...
- 299
0
votes
1
answer
305
views
Email goes to spam even with valid SPF, DKIM and DMARC records, dynamic rDNS on AWS instance
I have an instance on AWS and fighting with sending emails through cPanel.
All records are OK (checked on MX toolbox): SPF, DKIM, DMARC at the cPanel level and the WHM level (hostname). Even rDNS is ...
- 101
0
votes
0
answers
44
views
SendMail Bounce Back Missing Send To Address in Transcript
SendMail bounce back response is showing a blank To address. How can I correct this so the bounce back includes the To address?
This began occurring after installing opendkim on the server and before ...
- 179
1
vote
0
answers
51
views
Postfix: getting 50 or more copies of the same email from specific senders
I have a Postfix (2.10.1) / Dovecot server running on Centos 7. From specific servers I get about 50 copies of the same email every weekend, I tried a wireshark but it uses STARTTLS so its all ...
- 11
1
vote
1
answer
338
views
Why DMARC having DKIM failure?
I have enable DMARC feedback for my server. I am getting the following messages, in this case from google, but I've gotten similar from att.net, Microsoft and others:
Email Provider: google.com
Report ...
- 11
1
vote
1
answer
225
views
How to troubleshoot Exim problems?
I'm having difficulty making Exim add DKIM signatures to outgoing email. Judging by all the questions about that on the web, I'm not alone. But the answers are all of the form "Try this ...",...
- 11
1
vote
3
answers
223
views
SPF FAIL but DKIM PASS with my own domain
I do not understand the fail results in the following google DMARC report to our domain.
I understand that the SPF fails because the IP address is not ours but if so, how come DKIM passes?
<...
- 11
2
votes
1
answer
278
views
DKIM & SPF Allignment for Subdomains
We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The ...
- 51
0
votes
0
answers
101
views
How to migrate a cPanel domainkey txt field entry with multiple records (values) to CloudFlare?
I'm working on migrating all of the DNS entries on a cPanel server over to CloudFlare. In WHM (cPanel) I have a DKIM record that looks like this:
CloudFlare appears to only facilitate a single txt ...
- 1,153
-2
votes
1
answer
2k
views
Could not connect to SMTP host
I have a VPS server
I have a postfix mail server running on that VPS server (I installed it via command line using a tutorial)
I have an SMTP server running on that VPS server
I also have the required ...
2
votes
1
answer
2k
views
DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against email spoofing and phishing
People,
Using the website: https://easydmarc.com/tools/dmarc-lookup?domain=name.com
I got this error:
DMARC record is valid, but your domain's None/Quarantine policy does
not yet protect it against ...
- 1,255
0
votes
0
answers
92
views
Using opendkim with After-Queue Content Filter
I have a mail server that uses the 'simple' version of the Postfix After-Queue Content Filer described here:
https://www.postfix.org/FILTER_README.html
My filter for outbound mail can alter the ...
0
votes
1
answer
96
views
Mails from my domain to gmail always in spam
I have a problem,
all mails from my domain (lcs-proprete.fr) to GMAIL users only go to their spam folder.
SPF is ok, DKIM is okay and DMARC is configured as p=none
I disable dkim to be sure that the ...
2
votes
0
answers
448
views
How to Fix Microsoft Exchange incoming emails always failing with DKIM bodyhash mismatch
I am noticing on our servers that since we set DKIM to reject failures on Exim (v4.95) that a LOT of genuine emails are being rejected.
Looking at the Exim rejectlogs we see that persistantly these ...
- 199
0
votes
1
answer
368
views
dkim key error with bind9 dns
I am having an issue while configuring dkim with postfix on ubuntu 20.04, as i get the following error:
opendkim-testkey -d example.com -s khloud -vvv
opendkim-testkey: using default configfile /etc/...
0
votes
1
answer
456
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
0
votes
0
answers
339
views
DKIM: validation error: error:RSA_padding_check_PKCS1_type_1:invalid padding
We receive a lot of spam on our servers from 3rd party servers and often this spam includes the email header such as:
DKIM: validation error: error:0407008A:rsa routines:...
- 199
0
votes
2
answers
4k
views
Why did this incoming email get through Office 365 spam filters with a DKIM fail? What policy do I need to "tune"?
We use Office 365 mail, I got this spam email this morning so I checked the header to see if there was anything I could do. Here is the header with our receipt domain removed
Received: from ...
- 273
0
votes
0
answers
1k
views
DKIM_INVALID in Spamassassin only for emails sent from other emails in the same server
I have postfix/dovecot running with spamassassin on Centos.
PROBLEM:
The VPS acts as a mail server
Spamassassin edits the email subject and adds [SPAM}
Ms. Outlook on Windows moves those emails to ...
- 339
1
vote
0
answers
235
views
Why are my mails failling body hash verification?
Since a few weeks, mails sent via my mailserver at the-grue.de fail dkim authentification. That's very strange, because I'm not at all aware of any changes on my part...
mxtoolbox checked the mail, ...
2
votes
1
answer
182
views
(Why) Would email servers stop sending DMARC reports because of DKIM?
I have a personal email server I've been running for years; very seldom has there been a problem with sending mail and so I've never really got up to speed with things like SPF, DMARC, and DKIM. ...
- 197
1
vote
2
answers
157
views
Does this report mean someone is attempting to send emails fraudulently or that I have things configured wrong?
Pretty new to spf/dkim and dmark.
After setting this up just this morning I already got a report on a new website. Our service eamils our users via sendgrid and the rest of the emails are sent from ...
- 887
-1
votes
1
answer
730
views
How long should it take for google to authenticate a DKIM TXT DNS entry?
Does anyone know how long it takes for google to authenticate a DKIM TXT DNS entry?
The entry sits in AWS Route53 and the record is correctly saved, the record is only on a 10 second TTL.
Google seems ...
- 887
1
vote
2
answers
251
views
How can I use E-Mailrelay to implement DKIM?
I am trying to add DKIM to an existing windows server which is currently using IIS SMTP for outgoing mail.
It seems like this could be done by using E-Mailrelay. Unfortunately I could not find any ...
- 1,072
-1
votes
1
answer
630
views
Setup bind9 dns for setup DKIM and SPF records [closed]
Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
1
vote
1
answer
547
views
How to replace "via amazonses.com" with my apps branding "via example.com" for the email identities in AWS SES?
So in SES - there are two ways to verify identities as I can see:
Email identities
Domain identities
With domain identiies - it is easier to fix the "signed-by" and "mailed-by" ...
- 125