Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dkim]

DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a ...

0
votes
0answers
10 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
0
votes
1answer
30 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
2
votes
0answers
23 views

Email messages arrives without DKIM, and as spam, when I send from a specific network

In a specific case, when I send an e-mail message through thunderbird, the message arrives without the DKIM key and identified as spam at the source: X-Virus-Scanned: amavisd-new at mailserver....
1
vote
0answers
30 views

DKIM - how to account for different hostnames for the mail host (sendmail, FreeBSD 10.3)

I'm trying to use DKIM on a FreeBSD 10.3 box using "stock" sendmail. I followed this tutorial: https://www.dan.me.uk/blog/2016/06/01/add-dkim-signing-to-freebsd-servers and now DKIM "works" -- ...
1
vote
1answer
18 views

How mailchimp can sign email changing the domain and from header?

I've configured a SMPT server using postfix, dovecot, opendkim, openspf, openssl etc... I'm trying to figured out how mailchimp can send mails signed by their servers and deliver to recipients without ...
0
votes
1answer
149 views

Yahoo Rejecting Email - dkim=temperror (multiple keys)

Sorry this is long, I wanted to provide all the information I could. We have a web based application that sends emails to people that request information. Just recently Yahoo has been rejecting our ...
0
votes
1answer
26 views

dkim=neutral (bad service type)

I am trying to set up the dkim for an email and I am getting this error message on gmail: dkim=neutral (bad service type). However on Hotmail it is passing. I have not found any information on this ...
0
votes
0answers
36 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
0
votes
0answers
84 views

Yahoo dkim=permerror (bad sig), gmail dkim=fail

We are using postfix(with opendkim) to send registration information from our site. When the information sent to gmail it goes to inbox but it shows dkim=fail and in Yahoo it always goes to spam ...
1
vote
2answers
46 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
1
vote
1answer
45 views

DMARC and DKIM alignment with multiple DKIM signatures

If an email contains multiple DKIM signatures as it's forwarded, how does DMARC process the DKIM alignment check? Does ANY passing DKIM signature d= parameter have to match Header From? or Does the ...
-1
votes
1answer
105 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
0answers
69 views

DKIM Errors with gmail - dkim=neutral (no key) and other issues

I'm trying to upgrade my PHP DKIM from Sha1 to Sha256 and getting errors. I tried many things (as follows), basically gmail fails to authenticate my signature with all sorts of errors (as follows). My ...
0
votes
0answers
331 views

opendkim no signing table match for no signature data

I got an error when I try to install and config opendkim : no signing table match for 'contact@domain.com' no signature data opendkim.conf : # This is a basic configuration that can easily be ...
0
votes
0answers
21 views

Why would I not have 100% DKIM alignment when sending via AWS SES?

I've set up a DMARC report using https://dmarc.postmarkapp.com/ – we've been getting 100% DKIM alignment with our mails sent via AWS SES for months, but this week's report shows a significant drop to ...
0
votes
0answers
9 views

SPF Too many included lookups ? how to change to ipv4 or something else to bring to below 10 [duplicate]

my server cahardmoney.org has 14 SPF record lookups. I am setting up for sending with sendgrid but cannot figure out how to bring it down, any tips on changing the dns info to reduce to under 10? ...
1
vote
1answer
138 views

Unable to resolve DKIM TXT record

I've installed and configured OpenDKIM and SPF TXT records on Ubuntu 18.04 LTS. However, I'm unable to resolve my DKIM TXT record. I'm running NSD as my DNS and configured as mydomain.com.zone. My ...
0
votes
3answers
91 views

Is it possible to find a list of all DKIM keys for a domain?

a DKIM-record is identified by its selector, which might be default, dkim or something else alltogether (and there might be multiple). When making sure that an e-mail's content is valid, the DKIM ...
0
votes
0answers
71 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
241 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
2
votes
1answer
1k views

Email dkim=temperror (no key for signature)

I have a custom built web application that sends emails. This application is hosted by a third party. This application sends emails through their servers. I have correctly set my spf record. ...
0
votes
0answers
87 views

Double sign of DKIM in mail

I'm working on this problem a while now, without luck. My server signs mails with DKIM as it should, but if i sent the mail from a client through the server it signs the mail twice. How can i stop ...
-1
votes
1answer
71 views

Send email as a customer using just CNAME and setting up own DKIM, SPF

I own mydomain.com and I am trying to send emails as mycustomer1.com, mycustomer2.com, etc. (using mailgun). I am aware that by making my customer add DKIM and SPF records for mydomain.com will ...
2
votes
1answer
133 views

Checking DMARC Non-compliance, 4 Examples

We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we ...
0
votes
0answers
107 views

Configure postfix to DKIM-sign command line/system mail?

I'm running an internal (low-volume) mail server (via macOS Server.app 5.5) that uses amavisd-new for DKIM signing. I'm not running this to provide email services for users...I'm only using it in an ...
0
votes
0answers
227 views

DKIM Signature Is Not Valid when testing new e-mail server

I am in the process of setting up an e-mail server. It is nearly done, however there is one annoying problem left; I keep getting "Your DKIM Signature Is Not Valid" when testing my e-mail on mail-...
0
votes
0answers
239 views

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up ...
0
votes
1answer
154 views

Troubleshooting AWS SES DKIM issues with CNAME records

I am using AWS Simple Email Services (SES) and am trying to configure DKIM so as to add an extra layer of security to my emails. According to SES documentation, the procedure for setting up SES + DKIM ...
1
vote
1answer
32 views

Which domain to sign with DKIM?

When signing a message with DKIM, the choice of which domain's signature to use seems to lie on the sender - as far as I can tell, there is nothing prescriptive in the DKIM specification which says ...
1
vote
1answer
264 views

Valid DKIM signature ramdomly fails to validate

The scenario: I have a couple email servers running on Debian behind a firewall, a public IP and I have properly setup my DNS records (MCX, DMARC, DKIM, SPF). This is an example of my DNS records (...
1
vote
1answer
489 views

Is it wrong to leave out the “v=DKIM1;” on a DKIM record?

Looking at my mail hosting provider's already-populated DNS records, I see that their auto-generated DKIM record doesn't have v=DKIM; in it - it is simply k=rsa; p=hGF6ksa9fjf8SD6bcKk... in the ...
1
vote
1answer
216 views

opendkim-testkey returns “invalid data set type”, while if I specify domain and selector I got “Key OK”

I'm having the problem that opendkim testkey returns error "invalid data set type" unless I pass the domain and the selector to the command. Why does it happen? Details below: Without domain and ...
3
votes
1answer
202 views

Postfix setup with different domain name, reverse lookup and SPF

I would like to set up Postfix properly to serve multiple virtual domains while complying to all standards and being able to enable security measures like SPF. The server has the hostname server....
0
votes
1answer
230 views

Google detect DMARC not signed

I have this problem in my server: A domain example.com for send email and i have a web site in php The server server.example.com The server example2.com.mx for send email through a system in php ...
1
vote
1answer
50 views

Main and separate mail server with one zone file?

The setup is one main server (domain.tld) with an online shop and exim4 to send mails and a second server (mail.domain.tld) dedicated to the company mails. The DNS right now looks somewhat like this: ...
5
votes
1answer
388 views

NOT receiving DMARC reports from AOL / HOTMAIL / MSN / OUTLOOK / LIVE

My DMARC DNS record looks like this: (domain name is redacted) _dmarc.domain.com TXT "v=DMARC1; p=none; sp=none; rua=mailto:dmarc@domain.com; ruf=mailto:dmarc@domain.com; rf=afrf; pct=100; ri=...
0
votes
0answers
43 views

SPF,DKIM Failure and outcome

I have been doing a lot of reading around SPF, DKIM and DMARC and i think i have digested most of the information and how all three work in the email world. However one question i couldn't find is, ...
0
votes
0answers
33 views

Consistent DNS query timeut for TXT records in Azure Linux VM

I am running dkimproxy to sign and validate mail. I have been always getting this error when receiving mail. I never fixed it since years but now I would like to get rid of this Dec 11 13:44:54 cole ...
1
vote
1answer
76 views

DKIM Selector — Are they unique? or can a random selector be used.

I am setting up my DNS records with two email services: 1st G suite and the 2nd is active trail When setting my DKIM selector for G suite I have read it is google, however I have not been provided ...
1
vote
0answers
53 views

Sending DKIM-signed emails from specific IP with sendmail

I have a VPS with sendmail installed and configured. I'm hosting several domains on that VPS and recently added a dedicated IP address for one of them. I created a separate sendmail config file for ...
1
vote
1answer
180 views

Exim4 config - setting DKIM_DOMAIN

I've set up DKIM wit exim4 on my debian server. Everything is working correctly with one fixed domain, e.g. the following works perfectly fine. DKIM_DOMAIN = example.com Now I'm trying to change ...
0
votes
0answers
10 views

Exim: Gmail is marking my email as spam! :-( [duplicate]

I'm setting up my email server Exim on CentOS 7 and via VestaCP. I set SPF, DKIM, DMARC right and they all passed on Gmail, still im getting my email in junk. I'm not sure what is the issue. Can you ...
1
vote
1answer
306 views

Cannot get DKIM working with Exim4

I've tried everything I can think of to get DKIM working with Exim4 on my Ubuntu 16.04 server, but emails sent from my server are still not signed with DKIM! I am using Exim4, unsplit configuration. ...
0
votes
1answer
43 views

DMARC un-aligned, by business necessity?

I'm new to DMARC so this may be a silly question (sorry if it is): Base facts: My company has a primary name and many other "doing business as" (DBA from here on) partnerships. However each of these ...
0
votes
1answer
32 views

Is it as dangerous to modify DKIM domain's public key, as to get a domains' sending private keys?

I've been reading about DKIM and one of the reasons it cannot be "hacked" is because an attacker doesn't have access to a server's DKIM private key. But what if the attacker has access to the domain'...
1
vote
1answer
103 views

DMARC only get reports if emails fails authentication

I have setup DMARC on DNS v=DMARC1; p=none; sp=none; fo=1; ri=3600; rua=mailto:report@domain.com; ruf=mailto:report@domain.com I have set fo to 1 but I still get reports about emails that passed the ...
0
votes
1answer
170 views

DNS DKIM setup public key

I am trying to setup DKIM on DNS DNS record robot._domainkey.dynaccount.com IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu01ErHYuvyzng2KNnd4akmuCdV6nu8oxASIBcORwG8+...
0
votes
1answer
264 views

Keys does not match -dkim

I installed opendkim on server and have checked on mxtoolbox.com verifier that my dkim is done. However on using opendkim-testkey command i am getting following error: $ opendkim-testkey -v opendkim-...
0
votes
1answer
558 views

OpenDKIM Giving error of no key found

So I've setup OpenDKIM with Postfix and I can still send emails but when I do: opendkim-testkey -d example.com -s mail -vvv I get back: opendkim-testkey: using default configfile /etc/opendkim.conf ...
0
votes
1answer
25 views

DKIM verification without signing

All guides about DKIM focuses on signing. But how to configure sendmail to verify DKIM signatures of other mail servers? I've found this quiestion but wihtout appropriate answer Can I use DKIM ...