Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dkim]

DomainKeys Identified Mail is a scheme for signing and verifying email messages to confirm that that the source hasn't been forged, and is typically implemented by MTAs. The source MTA adds a header to the message body containing a signature, and the destination MTA verifies this signature against a key retrieved from DNS.

3
votes
1answer
372 views

Exim won't sign mail send by PHP through SMTP

I've been struggling to get Exim to sign my mails i'm sending with Zend2 Mailer class. The class has the option to send through SMTP; this is awesome since i have everything configured at MTA level. ...
2
votes
1answer
22 views

DKIM on aliased domains with rspamd and postfix

I'm having trouble DKIM signing my outgoing emails when they're sent from an alias domain. That is, when I'm authenticated with user@domain1.com sending as user@domain1.com or somebodyelse@domain1.com ...
2
votes
1answer
1k views

Exchange mailbox forwarding - emails fail dkim body hash

Exchange is modifying emails before forwarding them out to an external Google Apps account. I'm hoping to find a way to fix this. Here's some more detail: Using Exchange 2010 SP3 Version 14.3.123.4 ...
2
votes
1answer
1k views

Hotmail/Outlook.com DKIM failure when signing with different domain - header.d ignored

We (sender.org) provide a mail server for a client (example.org) and sign outgoing messages with our private DKIM key (we cannot change the signing domain to the client's domain). Return-Path: ...
1
vote
1answer
159 views

How to interpret DKIM x-tag and t-tag in gmail message source

After having configured DKIM several months ago for a specific domain, i notice the following which i cannot explain. DKIM has been configured with the following relevant (for this question) tags: - ...
1
vote
1answer
206 views

SPF, DKIM and DMARC all set but dmarc-reports keep saying the opposite

I'm losing my mind (again) on something about e-mails. I have a Kimsufi/OVH (Debian Wheezy 7.10) server. I have postfix and dovecot all set. My main domain/hostname is vaeserveur.fr, and i'm using ...
1
vote
1answer
2k views

DKIM header exists but signature is not valid

UPDATE Now the validator at mail-tester.com says the DKIM signature is fine. On the other hand the isnotspam.com still doesn't seem to like it. I assume it is working fine now. Also gmail accepts ...
1
vote
1answer
1k views

message headers say dkim = fail, stats say = PASSED. why the conflict, and how to fix?

In some-not-all received emails -- notably ONLY those sent via 'bulk' services -- I get a DKIM fail: "signature verification failed". Here's one example: Received message headers DKIM-Filter: ...
1
vote
1answer
979 views

DKIM signature and hmailserver - Your DKIM signature is not valid

I'm trying to get DKIM working on a domain using hmailserver as the mailserver, but I keep on getting Your DKIM signature is not valid This is from www.mail-tester.com The DKIM signature of your ...
2
votes
0answers
38 views

Email messages arrives without DKIM, and as spam, when I send from a specific network

In a specific case, when I send an e-mail message through thunderbird, the message arrives without the DKIM key and identified as spam at the source: X-Virus-Scanned: amavisd-new at mailserver....
2
votes
0answers
234 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
2
votes
0answers
439 views

Postfix + Amavisd-new as smtp-proxy (pre-queue) for inbound only, postqueue for outbound?

I am in the planning phase of building a mailserver with the following requirements relevant to my question: Use postfix, virtual users (two virtual domains) Must filter pre-queue to reject message ...
1
vote
0answers
144 views

opendkim on lokal net not working

I have a assignment in school to setup bind9, postfix, spf, dkim and dovecot on the same machine for the address mcduckcorp.duckburg.cali on a Debian 9 OS. I have managed to setup bind9, postfix and ...
1
vote
0answers
110 views

DKIM - how to account for different hostnames for the mail host (sendmail, FreeBSD 10.3)

I'm trying to use DKIM on a FreeBSD 10.3 box using "stock" sendmail. I followed this tutorial: https://www.dan.me.uk/blog/2016/06/01/add-dkim-signing-to-freebsd-servers and now DKIM "works" -- ...
1
vote
0answers
260 views

Yahoo dkim=permerror (bad sig), gmail dkim=fail

We are using postfix(with opendkim) to send registration information from our site. When the information sent to gmail it goes to inbox but it shows dkim=fail and in Yahoo it always goes to spam ...
1
vote
0answers
524 views

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up ...
1
vote
0answers
73 views

Sending DKIM-signed emails from specific IP with sendmail

I have a VPS with sendmail installed and configured. I'm hosting several domains on that VPS and recently added a dedicated IP address for one of them. I created a separate sendmail config file for ...
1
vote
0answers
161 views

DKIM temperror with hotmail due to nameserver records pointing to same server IP?

When I send emails to Hotmail I always seem to get DKIM temperrors. Only for hotmail. All other providers give pass. Now I'm wondering it this could have something to do with both nameservers for the ...
1
vote
0answers
1k views

DKIM - OpenSSL error: data too large for key size

I have installed openDKIM on a CentOS server running Exim as my MTA. I have gone through the configuration and tested the keys and eveything seems fine. I have created the public and private keys, ...
1
vote
0answers
924 views

Unable to query DKIM because of DNS timeout

I run dkimproxy to sign outbound email and verify inbound email. Since a while, I am experiencing the following permanent problem. The dkimproxy service is unable to query the DNS. Each and every ...
1
vote
0answers
190 views

How do I use SRS rewrite the From header on a forwarded email message

I have a serious problem here. I run a labor dispatch website, where users can register their cell phones (I send them an auth code via text, they enter it at the website, it's entirely opt-in). A job ...
1
vote
0answers
494 views

Sendmail refuses to sign messages with DKIM provided by opendkim

I have sendmail and opendkim installed on ubuntu 14.04 and would like to configure DKIM. Unfortunately sendmail refuses to sign outgoing emails with DKIM. Despite the fact that it already did before,...
1
vote
0answers
329 views

DKIM verification in exim4

I'm confused about the acl_smtp_dkim. In my main config I have # DKIM verification on rcpt. acl_smtp_dkim = acl_check_dkim domainlist require_dkim_signed_mail_domains = gmail.com:paypal.com ...
1
vote
0answers
73 views

Setting DKIM and SPF records for client domains

I have created an email server that is capable of handling mail for multiple websites. e.g. tom@website1.com, tom@website2.com etc. The emails are sending and receiving fine, but the spam score is ...
1
vote
0answers
3k views

DKIM-verification fails because of “insecure key”

I have my Debian (7.9 "wheezy") E-Mail-server (Postfix 2.9.6-2) setup to sign and verify DKIM signatures in e-mail messages using OpenDKIM (version 2.6.8-4). When I send myself an e-mail from my ...
1
vote
0answers
98 views

SpamAssassin : main.cf score if test not passed / not defined

I can set scores influences for different test passed in main.cf for spamassassin. Like if I set this variable : score URIBL_BLOCKED (3.5) This means that if mail marked is URIBL_BLOCKED for test, ...
1
vote
0answers
485 views

Exim mail not signing DKIM. Don't find whats wrong. (detailed description of steps taken)

I'd like to setup my fresh server (ubuntu) for hosting my www.bolleboos.be website and enable sending of email from my php scripts. So... I installed apache, php, mysql, ... and for the mail exim4 ...
1
vote
0answers
3k views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key 'default....
1
vote
0answers
676 views

postfix opendkim DKIM-Signature and Domainkey-Signature

Running postfix on CentOS 6 as an edge relay for a while now, so all our outgoing mail is routed through one point with opendkim signing the mail. This works great. I was originally using dkim-filter/...
1
vote
0answers
681 views

Not Connecting from my zimbra webmail

I have configured zimbra webmail on centos 5.5 64bit server for e-mail authentication. I have installed DKIM and dk-filter on it after installation to check authentication. I tried to open zimbra by ...
0
votes
0answers
14 views

DKIM “default” selector

I often see DKIM configuration guides using default as the selector. Is this a special selector or it is just a convention to use this if you only have one mail server? In other words, if I use the ...
0
votes
0answers
12 views

Why DKIM validation fails for yahoo, but pass for others?

Why does the DKIM validation for my mailserver fail for Yahoo but nor for others ? I saw this question, but I don't think it's the same issue and the answer was not helpful to me. MxToolbox gives no ...
0
votes
0answers
128 views

RSPAMD + DKIM Signing: How to be able to use a single DKIM Key for multiple domains?

I was able to setup a Single DKIM Key for multiple domains with OPENDKIM by using their KeyTables and SigningTable. But since the company started to use RSPAMD, I could not use OPENDKIM along with ...
0
votes
0answers
71 views

DKIM - many subdomains without multiple txt records

I've been having trouble with opendkim, figuring out how to best create records for multiple subdomains. I've tried using wildcards to cover all of the subdomains and wasn't able to get it working. I ...
0
votes
0answers
14 views

Adding AWS SES DKIM for domain using G Suite

My company has a domain acme.com with multiple subdomains running various AWS servers which are accessible via subdomains like client1.acme.com and we're also using G Suite for email. I'd like to ...
0
votes
0answers
35 views

If mail from “me” isn't DKIM signed, reject it

I am getting DMARC reports stating that an unauthorized IP is claiming to be me (our domain is in the headers). Looking at this section of the DMARC report, it occurs to me that I should be able to ...
0
votes
0answers
18 views

Will a single domain without DKIM affect mailserver IP reputation?

Just something I was curious about with mailserver reputation. Let's say I have a mailserver at IP 1.2.3.4 that handles emails for a couple of domains. If I have DKIM installed for some of these ...
0
votes
0answers
124 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
0
votes
0answers
198 views

DKIM Errors with gmail - dkim=neutral (no key) and other issues

I'm trying to upgrade my PHP DKIM from Sha1 to Sha256 and getting errors. I tried many things (as follows), basically gmail fails to authenticate my signature with all sorts of errors (as follows). My ...
0
votes
0answers
56 views

Why would I not have 100% DKIM alignment when sending via AWS SES?

I've set up a DMARC report using https://dmarc.postmarkapp.com/ – we've been getting 100% DKIM alignment with our mails sent via AWS SES for months, but this week's report shows a significant drop to ...
0
votes
0answers
228 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
567 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
0
votes
0answers
59 views

Consistent DNS query timeut for TXT records in Azure Linux VM

I am running dkimproxy to sign and validate mail. I have been always getting this error when receiving mail. I never fixed it since years but now I would like to get rid of this Dec 11 13:44:54 cole ...
0
votes
0answers
114 views

DKIM settings for domain with 302 redirect

I have 2 domains. I'll call them example.com and example2.com. My website is currently at example.com but one day will probably be moved to example2.com. Currently, example2.com has these two ...
0
votes
0answers
119 views

DKIM Key validation fails when using Mail Command

I have a relay server that I am using to send emails. I am signing outbound emails using dkim. When I send the mail using telnet the gmail logs look like this: Received-SPF: pass (google.com: domain ...
0
votes
0answers
3k views

postfix dkim=neutral reason=“invalid (public key: missing p= tag)” outgoing email not received

I use postfix to send outgoing emails ... a user does not receive sent posts ... when I sent same to my gmail account post does arrive in inbox ... yet below is what appears on Show Original ...
0
votes
0answers
331 views

opendkim - how to take action on incoming messages that should be signed?

How can I configure opendkim to quarantine or reject (incoming) unsigned messages that instead should be signed because a key is present in the DNS? opendkim.conf(5): On-NoSignature (string) ...
0
votes
0answers
3k views

Multiple DKIM records

I have google (Google Apps for Business) as my primary email provider. But I use another company to do the marketing email campaigns. And since Google doesn't allow to export DKIM key, I would like to ...
0
votes
0answers
555 views

Problems with signing emails with OpenDKIM

I've installed OpenDKIM to sign the outgoing emails sent from Postfix mail server following this guidelines: https://help.ubuntu.com/community/Postfix/DKIM https://www.exratione.com/2014/07/setting-...
-1
votes
0answers
29 views

DMARC and DKIM Authentication-Results for forwarded mails with multiple DKIM signatures

I am kinda lost in here, so please, bear with me. I have trouble with getting DMARC implementation right with opendmarc. When there is forwarded mail that is correctly signed by original sender, dmarc ...