dkim=neutral (no key) issues
Brought to you by:
jasonlong
|
From: Zakir S. <sea...@ya...> - 2009-07-25 11:22:18
|
Hi List, I've set up dkimproxy-1.1 on Centos 5.3. Configured to sign messages going out. This server is a relay server. ===================================================================================== When I send a mail locally from the server to Gmail / Yahoo, it reflects DKIM status properly as shown below: Received-SPF: pass (google.com: domain of ro...@yy... designates xx.xx.xx.xx as permitted sender) client-ip=xx.xx.xx.xx; Authentication-Results: mx.google.com; spf=pass (google.com: domain of ro...@yy... designates xx.xx.xx.xx as permitted sender) smt...@yy...; dkim=pass (test mode) hea...@yy... Received: from yyyy.com (yyyy.com [127.0.0.1]) by yyyy.com (Postfix) with ESMTP id 337DADF486D for <as...@gm...>; Sat, 25 Jul 2009 06:53:21 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=yyyy.com; h=to:subject :message-id:date:from; s=bmdeda; bh=/edzoYuyn17WXm8KeqcX/R+khdQ=; b= bEfBsGJuTQsL0Jyg0ipfb6UY17blF2y2AXrF515CFgML+UDHIPZ2n+S9iNkWuFaj fQm+tSpYShHBTBexMDuyY4Sdt0t4OE965GW2wfw+rSCFfouY5j5mLYfgBmRy7bku W0AB8f6gl5t9/3aHYOAzH8k5NxGTQMD0K2wuCTvPE4g= DomainKey-Signature: a=rsa-sha1; c=nofws; d=yyyy.com; h=to:subject :message-id:date:from; q=dns; s=bmdeda; b=XZUYaq/LNYOyLphsndUgem 422UPGQF/43GOycEiE9pUk9cBFmI+8y1B3yslcEyumnI/tCvTFkEJbGl9BQg/plD hz9jbHJBJoDTIcMPRgqvB6TiiqxOLkcpJxEtqN5YUPW2VTmVZdGFak7ygpeySC4y wDAUcfEKFEoE7a5xPj5Ag= ====================================================================================== But if the mails sent from different machines/servers [with differerent domain names] through this main mail server, then there is this error with DKIM status shown below: Received-SPF: fail (google.com: domain of xx...@xx... does not designate 206.71.54.52 as permitted sender) client-ip=xx.xx.xx.xx; Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of xx...@xx... does not designate xx.xx.xx.xx as permitted sender) smt...@xx...; dkim=neutral (no key) hea...@xx... Received: from yyyy.com (yyyy.com [127.0.0.1]) by yyyy.com (Postfix) with ESMTP id C6982DF486E for <as...@gm...>; Sat, 25 Jul 2009 06:59:13 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=xxxx.com; h=from:sender :to:subject:date:mime-version:content-type:message-id; s=zz; bh=5OPkPeK1CYGuBxed+eaMQTIW55Q=; b=SzGoDTeNrrWlsdZoy6aPMTYQd+o9 l+UeOO+R1Da3+ZSohgEq0Gf4aW1US+vlqn6ySMPioDpNhztRhNrKEwWbM5TerNZS K2jQyRN4pXnSNjRxmhrgEKlmixqhG5EiBHi9FAMAMnxdC6f2GvrLuROPfmLLD7hv jT9jJb36gy1G58E= DomainKey-Signature: a=rsa-sha1; c=nofws; d=xxxx.com; h=from:sender:to :subject:date:mime-version:content-type:message-id; q=dns; s= zz; b=iVoV6DPkfr3onuaNyFJ4MmsnDYy52iDAvYbCBGwsDWAqJ7uRbs+8mJ lY93YI4mHrdw32/rj6qKllDnqho2TFi3h9vw3Ps1Z2FhfNEXAvgPfgocUSGsqsqr P+BT6NdrYJdkndKRH3DiKjCgNYD8OQnP7rM3xZc1F1uMcmkWZ1J9M= ====================================================================================== Also; # cat dkimproxy_out.conf # specify what address/port DKIMproxy should listen on listen 127.0.0.1:10027 # specify what address/port DKIMproxy forwards mail to relay 127.0.0.1:10028 # specify what domains DKIMproxy can sign for (comma-separated, no spaces) domain yyyy.com,xxxx.com,qqqq.com,oooo.com # specify what signatures to add signature dkim(c=relaxed) signature domainkeys(c=nofws) # specify location of the private key keyfile /usr/local/src/dkimproxy-1.1/zz-dkim.private.key # specify the selector (i.e. the name of the key record put in DNS) selector zz ================================ Here is my Public Key published in the DNS Records: "k=rsa; t=y; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5awYwTCZr3DU+Asd+Uz1QtU52LVusyDPWd6u0R7qFbzVPGvxRm15w96q4qzaMj7ceP2dzsmHEhH4u1m31dp9hP9jbOmofsgKBcJETZFBEYfHeTgX3vnH852mHxjwU1j3J9Qx18wCCKyDnK7QOQfisyzcCuVxRMmBNRu4mxVis5wIDAQAB" =============================== This is an issue, which i need to solve urgently, thatz why bothering you guyz. Your Help will be greatly appreciated. Thanks & Regards, Zakir H. Shaikh Love Cricket? Check out live scores, photos, video highlights and more. Click here http://cricket.yahoo.com |