Home / Browse / dkim-milter / Mail / Archive

dkim-milter

Email Archive: dkim-milter-discuss (read-only)

[dkim-milter-discuss] DKIM check: temperror

From: Fabrizio Regalli <fab@ma...> - 2010-11-30 21:19

Hello.

I' ve installed DKIM on debian lenny.
Installation and configuration goes fine but each test fails.

This is last result from port25.com:

SPF check: pass
DomainKeys check: neutral
DKIM check: temperror
Sender-ID check: pass
SpamAssassin check: ham

As you can see it tells "neutral" and "temperror" but I don't understand
why.
If I try with "dig" command the result is like excepted:

:$ host -t txt mail._domainkey.mailsicura.org.
mail._domainkey.mailsicura.org descriptive text "v=DKIM1\; g=*\; k=rsa\;
t=y\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDByWhTDW2ylR
+twT5v6gXeK4GTkeKHycYapUxvdV2QL83IoYFUixEZ30fyLKkpkrfvHoJyQDAefy58b2VtJbWDZLXLn3wNDxRLx6LAX5a2Lyc/eMGnkd3QEpqIf+wrsPePkDW45RncuxjUMI6wgMUh3seyW5NIYOJC+GjoEfsKewIDAQAB"

My /etc/dkim-filter.conf looks like

Syslog yes
LogWhy yes
UMask 002
AutoRestart yes
AutoRestartRate 10/1h
Background yes
Canonicalization simple
DNSTimeout 5
Mode sv
SignatureAlgorithm rsa-sha256
SubDomains no
#ADSPDiscard no
#Version rfc4871
X-Header no
KeyList /etc/dkim-keys.conf

and my /etc/dkim-keys.conf looks like

*@mailsicura.org:mailsicura.org:/etc/dkim/keys/mailsicura.org/mail.

and in /etc/dkim/keys/mailsicura.org/mail. there is the private key.
The folder permissions seems to be ok (dkim-filter:dkim-filter)

Could someone please give me a suggest on what I missed?

Thanks.
Regards.

Fabrizio

Thread View

Thread	Author	Date
[dkim-milter-discuss] DKIM check: temperror	Fabrizio Regalli <fab@ma...>

Re: [dkim-milter-discuss] DKIM check: temperror

From: Fabrizio Regalli <fab@ma...> - 2010-11-30 22:01

Attachments: Message as HTML

Il giorno mar, 30/11/2010 alle 22.18 +0100, Fabrizio Regalli ha scritto:
> Hello.
> 
> I' ve installed DKIM on debian lenny.
> Installation and configuration goes fine but each test fails.
> 
> This is last result from port25.com:
> 
> 
> SPF check:          pass
> DomainKeys check:   neutral
> DKIM check:         temperror
> Sender-ID check:    pass
> SpamAssassin check: ham
> 
> As you can see it tells "neutral" and "temperror" but I don't understand
> why.
> If I try with "dig" command the result is like excepted:
> 
> :$ host -t txt mail._domainkey.mailsicura.org.
> mail._domainkey.mailsicura.org descriptive text "v=DKIM1\; g=*\; k=rsa\;
> t=y\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDByWhTDW2ylR
> +twT5v6gXeK4GTkeKHycYapUxvdV2QL83IoYFUixEZ30fyLKkpkrfvHoJyQDAefy58b2VtJbWDZLXLn3wNDxRLx6LAX5a2Lyc/eMGnkd3QEpqIf+wrsPePkDW45RncuxjUMI6wgMUh3seyW5NIYOJC+GjoEfsKewIDAQAB"
> 
> My /etc/dkim-filter.conf looks like
> 
> Syslog                  yes
> LogWhy                  yes
> UMask                   002
> AutoRestart             yes
> AutoRestartRate         10/1h
> Background              yes
> Canonicalization        simple
> DNSTimeout              5
> Mode                    sv
> SignatureAlgorithm      rsa-sha256
> SubDomains              no
> #ADSPDiscard            no
> #Version                rfc4871
> X-Header                no
> KeyList         /etc/dkim-keys.conf
> 
> and my /etc/dkim-keys.conf looks like
> 
> *@mailsicura.org:mailsicura.org:/etc/dkim/keys/mailsicura.org/mail.
> 
> and in /etc/dkim/keys/mailsicura.org/mail. there is the private key.
> The folder permissions seems to be ok (dkim-filter:dkim-filter)
> 
> 
> Could someone please give me a suggest on what I missed?
> 
> Thanks.
> Regards.
> 
> Fabrizio
> 
> 


Hi again,

I changed "Canonicalization" values from simple to relaxed/relaxed but
unfortunately nothing changed.
Gmail says:

...
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
fab@... designates 89.96.231.236 as permitted sender)
smtp.mail=fab@...; dkim=neutral (bad format)
header.i=@mailsicura.org

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailsicura.org;
s=mail.; t=1291154324; bh=fo1KM/9iLg4HeVoSh0vyLLUwihXR50d/OPwyIALa+dU=;
h=Subject:From:To:Content-Type:Date:Message-ID:Mime-Version;
b=oZ7dQG3tfa1wQvK4d6PFGYenq+8JUxO1gl1i4Xq
+YQpfhlMOoV04p5LVpPIQI3NgM /1UH06Nx53pkFJS9kMpydUjgse4
+99qmBPMtXEPLlZjGI7SEl03UKh8WS/Ufy5Wj5v tgaYg9O5nekLNV/2eXpDnEOoPbyadh9l
+/Jf+w3I=


and yahoo:

Authentication-Results: mta1142.mail.sk1.yahoo.com from=mailsicura.org;
domainkeys=neutral (no sig); from=mailsicura.org; dkim=temperror (key
retrieval failed)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailsicura.org;
s=mail.; t=1291154324; bh=fo1KM/9iLg4HeVoSh0vyLLUwihXR50d/OPwyIALa+dU=;
h=Subject:From:To:Content-Type:Date:Message-ID:Mime-Version;
b=oZ7dQG3tfa1wQvK4d6PFGYenq+8JUxO1gl1i4Xq
+YQpfhlMOoV04p5LVpPIQI3NgM /1UH06Nx53pkFJS9kMpydUjgse4
+99qmBPMtXEPLlZjGI7SEl03UKh8WS/Ufy5Wj5v tgaYg9O5nekLNV/2eXpDnEOoPbyadh9l
+/Jf+w3I=

Thanks again.

Re: [dkim-milter-discuss] DKIM check: temperror

From: Mark Martinec <Mark.Martinec@ij...> - 2010-11-30 22:43

On Tuesday November 30 2010 23:00:21 Fabrizio Regalli wrote:
> > This is last result from port25.com:
> > DKIM check:         temperror
> > 
> > As you can see it tells "neutral" and "temperror" but I don't understand
> > why.
> > 
> > If I try with "dig" command the result is like excepted:
> > :$ host -t txt mail._domainkey.mailsicura.org.


> and yahoo:
> 
> Authentication-Results: mta1142.mail.sk1.yahoo.com from=mailsicura.org;
> domainkeys=neutral (no sig); from=mailsicura.org; dkim=temperror (key
> retrieval failed)

$ host -C mailsicura.org
mailsicura.org          NS      dns.mailsicura.org
dns.mailsicura.org      fab.mailsicura.org      (2010113009 10800 1800 604800 3600)
mailsicura.org          NS      ns6.gandi.net
mailsicura.org SOA record not found at ns6.gandi.net, server failure
mailsicura.org has lame delegation to ns6.gandi.net

  Mark

Re: [dkim-milter-discuss] DKIM check: temperror

From: Rolf E. Sonneveld <R.Sonneveld@so...> - 2010-11-30 22:45

On 11/30/10 11:00 PM, Fabrizio Regalli wrote:
> Il giorno mar, 30/11/2010 alle 22.18 +0100, Fabrizio Regalli ha scritto:
>> Hello.
>>
>> I' ve installed DKIM on debian lenny.
>> Installation and configuration goes fine but each test fails.
>>
>> This is last result from port25.com:
>>
>>
>> SPF check:          pass
>> DomainKeys check:   neutral
>> DKIM check:         temperror
>> Sender-ID check:    pass
>> SpamAssassin check: ham
>>
>> As you can see it tells "neutral" and "temperror" but I don't understand
>> why.
>> If I try with "dig" command the result is like excepted:
>>
>> :$ host -t txt mail._domainkey.mailsicura.org.
>> mail._domainkey.mailsicura.org descriptive text "v=DKIM1\; g=*\; k=rsa\;
>> t=y\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDByWhTDW2ylR
>> +twT5v6gXeK4GTkeKHycYapUxvdV2QL83IoYFUixEZ30fyLKkpkrfvHoJyQDAefy58b2VtJbWDZLXLn3wNDxRLx6LAX5a2Lyc/eMGnkd3QEpqIf+wrsPePkDW45RncuxjUMI6wgMUh3seyW5NIYOJC+GjoEfsKewIDAQAB"
>>
>> My /etc/dkim-filter.conf looks like
>>
>> Syslog                  yes
>> LogWhy                  yes
>> UMask                   002
>> AutoRestart             yes
>> AutoRestartRate         10/1h
>> Background              yes
>> Canonicalization        simple
>> DNSTimeout              5
>> Mode                    sv
>> SignatureAlgorithm      rsa-sha256
>> SubDomains              no
>> #ADSPDiscard            no
>> #Version                rfc4871
>> X-Header                no
>> KeyList         /etc/dkim-keys.conf
>>
>> and my /etc/dkim-keys.conf looks like
>>
>> *@mailsicura.org:mailsicura.org:/etc/dkim/keys/mailsicura.org/mail.
>>
>> and in /etc/dkim/keys/mailsicura.org/mail. there is the private key.
>> The folder permissions seems to be ok (dkim-filter:dkim-filter)
>>
>>
>> Could someone please give me a suggest on what I missed?
>>
>> Thanks.
>> Regards.
>>
>> Fabrizio
>>
>>
>
> Hi again,
>
> I changed "Canonicalization" values from simple to relaxed/relaxed but
> unfortunately nothing changed.
> Gmail says:
>
> ...
> Authentication-Results: mx.google.com; spf=pass (google.com: domain of
> fab@... designates 89.96.231.236 as permitted sender)
> smtp.mail=fab@...; dkim=neutral (bad format)
> header.i=@mailsicura.org
>
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailsicura.org;
> s=mail.; t=1291154324; bh=fo1KM/9iLg4HeVoSh0vyLLUwihXR50d/OPwyIALa+dU=;
> h=Subject:From:To:Content-Type:Date:Message-ID:Mime-Version;
> b=oZ7dQG3tfa1wQvK4d6PFGYenq+8JUxO1gl1i4Xq
> +YQpfhlMOoV04p5LVpPIQI3NgM /1UH06Nx53pkFJS9kMpydUjgse4
> +99qmBPMtXEPLlZjGI7SEl03UKh8WS/Ufy5Wj5v tgaYg9O5nekLNV/2eXpDnEOoPbyadh9l
> +/Jf+w3I=
>
>
> and yahoo:
>
> Authentication-Results: mta1142.mail.sk1.yahoo.com from=mailsicura.org;
> domainkeys=neutral (no sig); from=mailsicura.org; dkim=temperror (key
> retrieval failed)
>
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailsicura.org;
> s=mail.; t=1291154324; bh=fo1KM/9iLg4HeVoSh0vyLLUwihXR50d/OPwyIALa+dU=;
> h=Subject:From:To:Content-Type:Date:Message-ID:Mime-Version;
> b=oZ7dQG3tfa1wQvK4d6PFGYenq+8JUxO1gl1i4Xq
> +YQpfhlMOoV04p5LVpPIQI3NgM /1UH06Nx53pkFJS9kMpydUjgse4
> +99qmBPMtXEPLlZjGI7SEl03UKh8WS/Ufy5Wj5v tgaYg9O5nekLNV/2eXpDnEOoPbyadh9l
> +/Jf+w3I=

I assume the problem is in the dot within your selector. Using a dot in 
the selector creates a double-dot in the DNS location where the key has 
to be stored/retrieved (mail.._domainkey.mailsicura.org is not a valid 
DNS name).

/rolf

Re: [dkim-milter-discuss] DKIM check: temperror

From: Fabrizio Regalli <fab@ma...> - 2010-11-30 22:50

Attachments: Message as HTML

> 
> I assume the problem is in the dot within your selector. Using a dot in 
> the selector creates a double-dot in the DNS location where the key has 
> to be stored/retrieved (mail.._domainkey.mailsicura.org is not a valid 
> DNS name).
> 
> /rolf
> 

Thanks Rolf, you are right!
The problem is the final dot: I delete it and rename my private key
without final dot and works great!
Sorry for my stupid mistake!

Regards,
Fabrizio