Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dkim]

DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

0
votes
0answers
23 views

SPF and DKIM understanding

Can someone help me understand why if office 365 I have spam set to block anything that has an SPF Hard Fail. Why is this getting through? Also, I have seen where the email passes SPF and gets through....
5
votes
1answer
121 views

Why is my opendmarc failing pretty much everything that comes through?

I have this domain for which I set up SPF, DKIM, and DMARC stuff. Let's pretend the domain is example.com which has the following entries in its DNS zone: example.com. 600 IN MX ...
-2
votes
1answer
42 views

where should i add dkim records when using custom name servers?

I have recently setup mail server on ubuntu14.04 using postfix, dovecot. I am very confused about adding dkim records. Every tutorial i have followed is saying i should add dkim at domain registrar ...
1
vote
0answers
50 views

opendkim on lokal net not working

I have a assignment in school to setup bind9, postfix, spf, dkim and dovecot on the same machine for the address mcduckcorp.duckburg.cali on a Debian 9 OS. I have managed to setup bind9, postfix and ...
0
votes
1answer
36 views

DKIM public key & DKIM from DNS are the same but don't match because of spacing

Please take a look at this picture of mail-tester.com saying that Your DKIM signature is not valid. As you can see, the DKIM signature and public key are identical in term of text (characters) but ...
1
vote
1answer
32 views

Can one bypass DMARC policy DKIM requirements simply by not using DKIM or by using an SMTP envelope with a valid DKIM for the envelope from domain

Am I right to say that DMARC has no way to say "all emails must be signed". My understanding here is that I can specify that I want DKIM to be either lax or strict - which I understand to mean that, ...
-1
votes
1answer
87 views

SPF and DKIM configuration Ubuntu 18.04 fails

I have been following this tutorial from DigitalOcean. I have followed every detail but nothing seems to work as expected. Assuming that my FQDN is the following: mydomain.com. Here are my details: ...
0
votes
1answer
93 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
1
vote
2answers
53 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
2
votes
0answers
23 views

Email messages arrives without DKIM, and as spam, when I send from a specific network

In a specific case, when I send an e-mail message through thunderbird, the message arrives without the DKIM key and identified as spam at the source: X-Virus-Scanned: amavisd-new at mailserver....
1
vote
0answers
46 views

DKIM - how to account for different hostnames for the mail host (sendmail, FreeBSD 10.3)

I'm trying to use DKIM on a FreeBSD 10.3 box using "stock" sendmail. I followed this tutorial: https://www.dan.me.uk/blog/2016/06/01/add-dkim-signing-to-freebsd-servers and now DKIM "works" -- ...
1
vote
1answer
26 views

How mailchimp can sign email changing the domain and from header?

I've configured a SMPT server using postfix, dovecot, opendkim, openspf, openssl etc... I'm trying to figured out how mailchimp can send mails signed by their servers and deliver to recipients without ...
0
votes
1answer
174 views

Yahoo Rejecting Email - dkim=temperror (multiple keys)

Sorry this is long, I wanted to provide all the information I could. We have a web based application that sends emails to people that request information. Just recently Yahoo has been rejecting our ...
0
votes
1answer
55 views

dkim=neutral (bad service type)

I am trying to set up the dkim for an email and I am getting this error message on gmail: dkim=neutral (bad service type). However on Hotmail it is passing. I have not found any information on this ...
0
votes
0answers
58 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
0
votes
0answers
127 views

Yahoo dkim=permerror (bad sig), gmail dkim=fail

We are using postfix(with opendkim) to send registration information from our site. When the information sent to gmail it goes to inbox but it shows dkim=fail and in Yahoo it always goes to spam ...
1
vote
2answers
50 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
1
vote
1answer
96 views

DMARC and DKIM alignment with multiple DKIM signatures

If an email contains multiple DKIM signatures as it's forwarded, how does DMARC process the DKIM alignment check? Does ANY passing DKIM signature d= parameter have to match Header From? or Does the ...
-1
votes
1answer
157 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
0answers
98 views

DKIM Errors with gmail - dkim=neutral (no key) and other issues

I'm trying to upgrade my PHP DKIM from Sha1 to Sha256 and getting errors. I tried many things (as follows), basically gmail fails to authenticate my signature with all sorts of errors (as follows). My ...
1
vote
1answer
624 views

opendkim no signing table match for no signature data

I got an error when I try to install and config opendkim : no signing table match for 'contact@domain.com' no signature data opendkim.conf : # This is a basic configuration that can easily be ...
0
votes
0answers
25 views

Why would I not have 100% DKIM alignment when sending via AWS SES?

I've set up a DMARC report using https://dmarc.postmarkapp.com/ – we've been getting 100% DKIM alignment with our mails sent via AWS SES for months, but this week's report shows a significant drop to ...
0
votes
0answers
9 views

SPF Too many included lookups ? how to change to ipv4 or something else to bring to below 10 [duplicate]

my server cahardmoney.org has 14 SPF record lookups. I am setting up for sending with sendgrid but cannot figure out how to bring it down, any tips on changing the dns info to reduce to under 10? ...
1
vote
1answer
201 views

Unable to resolve DKIM TXT record

I've installed and configured OpenDKIM and SPF TXT records on Ubuntu 18.04 LTS. However, I'm unable to resolve my DKIM TXT record. I'm running NSD as my DNS and configured as mydomain.com.zone. My ...
0
votes
3answers
246 views

Is it possible to find a list of all DKIM keys for a domain?

a DKIM-record is identified by its selector, which might be default, dkim or something else alltogether (and there might be multiple). When making sure that an e-mail's content is valid, the DKIM ...
0
votes
0answers
82 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
325 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
3
votes
1answer
2k views

Email dkim=temperror (no key for signature)

I have a custom built web application that sends emails. This application is hosted by a third party. This application sends emails through their servers. I have correctly set my spf record. ...
0
votes
0answers
104 views

Double sign of DKIM in mail

I'm working on this problem a while now, without luck. My server signs mails with DKIM as it should, but if i sent the mail from a client through the server it signs the mail twice. How can i stop ...
-1
votes
1answer
94 views

Send email as a customer using just CNAME and setting up own DKIM, SPF

I own mydomain.com and I am trying to send emails as mycustomer1.com, mycustomer2.com, etc. (using mailgun). I am aware that by making my customer add DKIM and SPF records for mydomain.com will ...
2
votes
1answer
169 views

Checking DMARC Non-compliance, 4 Examples

We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we ...
0
votes
0answers
130 views

Configure postfix to DKIM-sign command line/system mail?

I'm running an internal (low-volume) mail server (via macOS Server.app 5.5) that uses amavisd-new for DKIM signing. I'm not running this to provide email services for users...I'm only using it in an ...
0
votes
0answers
323 views

DKIM Signature Is Not Valid when testing new e-mail server

I am in the process of setting up an e-mail server. It is nearly done, however there is one annoying problem left; I keep getting "Your DKIM Signature Is Not Valid" when testing my e-mail on mail-...
1
vote
0answers
294 views

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up ...
0
votes
1answer
179 views

Troubleshooting AWS SES DKIM issues with CNAME records

I am using AWS Simple Email Services (SES) and am trying to configure DKIM so as to add an extra layer of security to my emails. According to SES documentation, the procedure for setting up SES + DKIM ...
1
vote
1answer
32 views

Which domain to sign with DKIM?

When signing a message with DKIM, the choice of which domain's signature to use seems to lie on the sender - as far as I can tell, there is nothing prescriptive in the DKIM specification which says ...
1
vote
1answer
385 views

Valid DKIM signature ramdomly fails to validate

The scenario: I have a couple email servers running on Debian behind a firewall, a public IP and I have properly setup my DNS records (MCX, DMARC, DKIM, SPF). This is an example of my DNS records (...
1
vote
1answer
679 views

Is it wrong to leave out the “v=DKIM1;” on a DKIM record?

Looking at my mail hosting provider's already-populated DNS records, I see that their auto-generated DKIM record doesn't have v=DKIM; in it - it is simply k=rsa; p=hGF6ksa9fjf8SD6bcKk... in the ...
2
votes
1answer
252 views

opendkim-testkey returns “invalid data set type”, while if I specify domain and selector I got “Key OK”

I'm having the problem that opendkim testkey returns error "invalid data set type" unless I pass the domain and the selector to the command. Why does it happen? Details below: Without domain and ...
3
votes
1answer
250 views

Postfix setup with different domain name, reverse lookup and SPF

I would like to set up Postfix properly to serve multiple virtual domains while complying to all standards and being able to enable security measures like SPF. The server has the hostname server....
0
votes
1answer
294 views

Google detect DMARC not signed

I have this problem in my server: A domain example.com for send email and i have a web site in php The server server.example.com The server example2.com.mx for send email through a system in php ...
1
vote
1answer
51 views

Main and separate mail server with one zone file?

The setup is one main server (domain.tld) with an online shop and exim4 to send mails and a second server (mail.domain.tld) dedicated to the company mails. The DNS right now looks somewhat like this: ...
5
votes
1answer
449 views

NOT receiving DMARC reports from AOL / HOTMAIL / MSN / OUTLOOK / LIVE

My DMARC DNS record looks like this: (domain name is redacted) _dmarc.domain.com TXT "v=DMARC1; p=none; sp=none; rua=mailto:dmarc@domain.com; ruf=mailto:dmarc@domain.com; rf=afrf; pct=100; ri=...
2
votes
1answer
107 views

SPF,DKIM Failure and outcome

I have been doing a lot of reading around SPF, DKIM and DMARC and i think i have digested most of the information and how all three work in the email world. However one question i couldn't find is, ...
0
votes
0answers
47 views

Consistent DNS query timeut for TXT records in Azure Linux VM

I am running dkimproxy to sign and validate mail. I have been always getting this error when receiving mail. I never fixed it since years but now I would like to get rid of this Dec 11 13:44:54 cole ...
1
vote
1answer
99 views

DKIM Selector — Are they unique? or can a random selector be used.

I am setting up my DNS records with two email services: 1st G suite and the 2nd is active trail When setting my DKIM selector for G suite I have read it is google, however I have not been provided ...
1
vote
0answers
57 views

Sending DKIM-signed emails from specific IP with sendmail

I have a VPS with sendmail installed and configured. I'm hosting several domains on that VPS and recently added a dedicated IP address for one of them. I created a separate sendmail config file for ...
1
vote
1answer
265 views

Exim4 config - setting DKIM_DOMAIN

I've set up DKIM wit exim4 on my debian server. Everything is working correctly with one fixed domain, e.g. the following works perfectly fine. DKIM_DOMAIN = example.com Now I'm trying to change ...
0
votes
0answers
10 views

Exim: Gmail is marking my email as spam! :-( [duplicate]

I'm setting up my email server Exim on CentOS 7 and via VestaCP. I set SPF, DKIM, DMARC right and they all passed on Gmail, still im getting my email in junk. I'm not sure what is the issue. Can you ...
1
vote
1answer
364 views

Cannot get DKIM working with Exim4

I've tried everything I can think of to get DKIM working with Exim4 on my Ubuntu 16.04 server, but emails sent from my server are still not signed with DKIM! I am using Exim4, unsplit configuration. ...