Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dkim]

DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a key retrieved from DNS.

0
votes
1answer
15 views

SPF and DMARC protection

Today while working at my company, we saw allot of automatic reply emails coming into one of our group inboxes (i.e. info@company.com). We suspect that this email address is being used in a phishing ...
0
votes
0answers
13 views

Will a single domain without DKIM affect mailserver IP reputation?

Just something I was curious about with mailserver reputation. Let's say I have a mailserver at IP 1.2.3.4 that handles emails for a couple of domains. If I have DKIM installed for some of these ...
0
votes
2answers
58 views

DKIM in Exchange Server 2010

I need to generate DKIM public/private keys for Exchange Server 2010. https://www.emailarchitect.net/domainkeys/kb/dkim_exchange_2007_2010_2013.aspx I have run the DKIM Installer but it was hanging ...
1
vote
2answers
46 views

SPF and DMARC - is spf policy used?

I understand how SPF is involved with DMARC alignment, but one thing I can't get clear: is the SPF policy (-all or ~all) used in DMARC? Or does DMARC merely use the IP ranges? The issue is, that as ...
-1
votes
0answers
46 views

dkim not reading conf file?

i'm bit of a newbie. I am getting dkim=fail. The reason i say conf file not being read is that if i change to simple:simple, email source is showing c=relaxed/relaxed. So not sure whether that shows ...
-1
votes
1answer
62 views

Emails go to spam ( Reverse DNS is set , DKIM pass , SPF pass , DMARC pass ) [duplicate]

It's been now 3 days that I am struggling with configuring my emails to go to the inbox. I have a VPS server at OVH and a domain name. I have configured everything in virtualmin with OpenDKIM and ...
0
votes
0answers
29 views

openDKIM double verification

I'm configuring opendkim to verify the emails of my inbound mail server (previously with spamassassin installed) and I have two times DKIM verification DKIM-Filter: OpenDKIM Filter v2.11.0 xxx.xxx....
1
vote
1answer
26 views

DKIM : Which domain is considered?

DKIM verifies the domain of an e-mail sender, but... What "domain" does it check? The "domain" of the MAILFROM field of the SMTP envelope ? The "domain" of the FROM header of the message ? The "...
0
votes
0answers
27 views

SPF and DKIM understanding

Can someone help me understand why if office 365 I have spam set to block anything that has an SPF Hard Fail. Why is this getting through? Also, I have seen where the email passes SPF and gets through....
5
votes
1answer
249 views

Why is my opendmarc failing pretty much everything that comes through?

I have this domain for which I set up SPF, DKIM, and DMARC stuff. Let's pretend the domain is example.com which has the following entries in its DNS zone: example.com. 600 IN MX ...
-2
votes
1answer
47 views

where should i add dkim records when using custom name servers?

I have recently setup mail server on ubuntu14.04 using postfix, dovecot. I am very confused about adding dkim records. Every tutorial i have followed is saying i should add dkim at domain registrar ...
1
vote
0answers
90 views

opendkim on lokal net not working

I have a assignment in school to setup bind9, postfix, spf, dkim and dovecot on the same machine for the address mcduckcorp.duckburg.cali on a Debian 9 OS. I have managed to setup bind9, postfix and ...
0
votes
1answer
49 views

DKIM public key & DKIM from DNS are the same but don't match because of spacing

Please take a look at this picture of mail-tester.com saying that Your DKIM signature is not valid. As you can see, the DKIM signature and public key are identical in term of text (characters) but ...
1
vote
1answer
47 views

Can one bypass DMARC policy DKIM requirements simply by not using DKIM or by using an SMTP envelope with a valid DKIM for the envelope from domain

Am I right to say that DMARC has no way to say "all emails must be signed". My understanding here is that I can specify that I want DKIM to be either lax or strict - which I understand to mean that, ...
-1
votes
1answer
255 views

SPF and DKIM configuration Ubuntu 18.04 fails

I have been following this tutorial from DigitalOcean. I have followed every detail but nothing seems to work as expected. Assuming that my FQDN is the following: mydomain.com. Here are my details: ...
0
votes
1answer
220 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
1
vote
2answers
60 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
2
votes
0answers
27 views

Email messages arrives without DKIM, and as spam, when I send from a specific network

In a specific case, when I send an e-mail message through thunderbird, the message arrives without the DKIM key and identified as spam at the source: X-Virus-Scanned: amavisd-new at mailserver....
1
vote
0answers
73 views

DKIM - how to account for different hostnames for the mail host (sendmail, FreeBSD 10.3)

I'm trying to use DKIM on a FreeBSD 10.3 box using "stock" sendmail. I followed this tutorial: https://www.dan.me.uk/blog/2016/06/01/add-dkim-signing-to-freebsd-servers and now DKIM "works" -- ...
1
vote
1answer
34 views

How mailchimp can sign email changing the domain and from header?

I've configured a SMPT server using postfix, dovecot, opendkim, openspf, openssl etc... I'm trying to figured out how mailchimp can send mails signed by their servers and deliver to recipients without ...
0
votes
1answer
209 views

Yahoo Rejecting Email - dkim=temperror (multiple keys)

Sorry this is long, I wanted to provide all the information I could. We have a web based application that sends emails to people that request information. Just recently Yahoo has been rejecting our ...
0
votes
1answer
94 views

dkim=neutral (bad service type)

I am trying to set up the dkim for an email and I am getting this error message on gmail: dkim=neutral (bad service type). However on Hotmail it is passing. I have not found any information on this ...
0
votes
0answers
80 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
0
votes
0answers
177 views

Yahoo dkim=permerror (bad sig), gmail dkim=fail

We are using postfix(with opendkim) to send registration information from our site. When the information sent to gmail it goes to inbox but it shows dkim=fail and in Yahoo it always goes to spam ...
1
vote
2answers
57 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
2
votes
2answers
173 views

DMARC and DKIM alignment with multiple DKIM signatures

If an email contains multiple DKIM signatures as it's forwarded, how does DMARC process the DKIM alignment check? Does ANY passing DKIM signature d= parameter have to match Header From? or Does the ...
-1
votes
1answer
239 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
0answers
121 views

DKIM Errors with gmail - dkim=neutral (no key) and other issues

I'm trying to upgrade my PHP DKIM from Sha1 to Sha256 and getting errors. I tried many things (as follows), basically gmail fails to authenticate my signature with all sorts of errors (as follows). My ...
1
vote
1answer
900 views

opendkim no signing table match for no signature data

I got an error when I try to install and config opendkim : no signing table match for 'contact@domain.com' no signature data opendkim.conf : # This is a basic configuration that can easily be ...
0
votes
0answers
30 views

Why would I not have 100% DKIM alignment when sending via AWS SES?

I've set up a DMARC report using https://dmarc.postmarkapp.com/ – we've been getting 100% DKIM alignment with our mails sent via AWS SES for months, but this week's report shows a significant drop to ...
0
votes
0answers
9 views

SPF Too many included lookups ? how to change to ipv4 or something else to bring to below 10 [duplicate]

my server cahardmoney.org has 14 SPF record lookups. I am setting up for sending with sendgrid but cannot figure out how to bring it down, any tips on changing the dns info to reduce to under 10? ...
1
vote
1answer
274 views

Unable to resolve DKIM TXT record

I've installed and configured OpenDKIM and SPF TXT records on Ubuntu 18.04 LTS. However, I'm unable to resolve my DKIM TXT record. I'm running NSD as my DNS and configured as mydomain.com.zone. My ...
0
votes
3answers
522 views

Is it possible to find a list of all DKIM keys for a domain?

a DKIM-record is identified by its selector, which might be default, dkim or something else alltogether (and there might be multiple). When making sure that an e-mail's content is valid, the DKIM ...
0
votes
0answers
109 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
408 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
4
votes
1answer
3k views

Email dkim=temperror (no key for signature)

I have a custom built web application that sends emails. This application is hosted by a third party. This application sends emails through their servers. I have correctly set my spf record. ...
0
votes
0answers
125 views

Double sign of DKIM in mail

I'm working on this problem a while now, without luck. My server signs mails with DKIM as it should, but if i sent the mail from a client through the server it signs the mail twice. How can i stop ...
-1
votes
1answer
125 views

Send email as a customer using just CNAME and setting up own DKIM, SPF

I own mydomain.com and I am trying to send emails as mycustomer1.com, mycustomer2.com, etc. (using mailgun). I am aware that by making my customer add DKIM and SPF records for mydomain.com will ...
2
votes
1answer
218 views

Checking DMARC Non-compliance, 4 Examples

We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we ...
0
votes
0answers
149 views

Configure postfix to DKIM-sign command line/system mail?

I'm running an internal (low-volume) mail server (via macOS Server.app 5.5) that uses amavisd-new for DKIM signing. I'm not running this to provide email services for users...I'm only using it in an ...
0
votes
0answers
440 views

DKIM Signature Is Not Valid when testing new e-mail server

I am in the process of setting up an e-mail server. It is nearly done, however there is one annoying problem left; I keep getting "Your DKIM Signature Is Not Valid" when testing my e-mail on mail-...
1
vote
0answers
363 views

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up ...
0
votes
1answer
222 views

Troubleshooting AWS SES DKIM issues with CNAME records

I am using AWS Simple Email Services (SES) and am trying to configure DKIM so as to add an extra layer of security to my emails. According to SES documentation, the procedure for setting up SES + DKIM ...
1
vote
1answer
34 views

Which domain to sign with DKIM?

When signing a message with DKIM, the choice of which domain's signature to use seems to lie on the sender - as far as I can tell, there is nothing prescriptive in the DKIM specification which says ...
1
vote
1answer
504 views

Valid DKIM signature ramdomly fails to validate

The scenario: I have a couple email servers running on Debian behind a firewall, a public IP and I have properly setup my DNS records (MCX, DMARC, DKIM, SPF). This is an example of my DNS records (...
1
vote
1answer
933 views

Is it wrong to leave out the “v=DKIM1;” on a DKIM record?

Looking at my mail hosting provider's already-populated DNS records, I see that their auto-generated DKIM record doesn't have v=DKIM; in it - it is simply k=rsa; p=hGF6ksa9fjf8SD6bcKk... in the ...
2
votes
1answer
329 views

opendkim-testkey returns “invalid data set type”, while if I specify domain and selector I got “Key OK”

I'm having the problem that opendkim testkey returns error "invalid data set type" unless I pass the domain and the selector to the command. Why does it happen? Details below: Without domain and ...
3
votes
1answer
297 views

Postfix setup with different domain name, reverse lookup and SPF

I would like to set up Postfix properly to serve multiple virtual domains while complying to all standards and being able to enable security measures like SPF. The server has the hostname server....
0
votes
1answer
366 views

Google detect DMARC not signed

I have this problem in my server: A domain example.com for send email and i have a web site in php The server server.example.com The server example2.com.mx for send email through a system in php ...
1
vote
1answer
51 views

Main and separate mail server with one zone file?

The setup is one main server (domain.tld) with an online shop and exim4 to send mails and a second server (mail.domain.tld) dedicated to the company mails. The DNS right now looks somewhat like this: ...