dkim=neutral (no key) issues

[Zakir S. <sea...@ya...>]

Hi List,

I've set up dkimproxy-1.1 on Centos 5.3. Configured to sign messages going out.
This server is a relay server.


=====================================================================================
When I send a mail locally from the server to Gmail / Yahoo, it reflects DKIM status properly as shown below:

Received-SPF: pass (google.com: domain of ro...@yy... designates xx.xx.xx.xx as permitted sender) client-ip=xx.xx.xx.xx;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of ro...@yy... designates xx.xx.xx.xx as permitted sender) smt...@yy...; dkim=pass (test mode) hea...@yy...
Received: from yyyy.com (yyyy.com [127.0.0.1])
	by yyyy.com (Postfix) with ESMTP id 337DADF486D
	for <as...@gm...>; Sat, 25 Jul 2009 06:53:21 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=yyyy.com; h=to:subject
	:message-id:date:from; s=bmdeda; bh=/edzoYuyn17WXm8KeqcX/R+khdQ=; b=
	bEfBsGJuTQsL0Jyg0ipfb6UY17blF2y2AXrF515CFgML+UDHIPZ2n+S9iNkWuFaj
	fQm+tSpYShHBTBexMDuyY4Sdt0t4OE965GW2wfw+rSCFfouY5j5mLYfgBmRy7bku
	W0AB8f6gl5t9/3aHYOAzH8k5NxGTQMD0K2wuCTvPE4g=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=yyyy.com; h=to:subject
	:message-id:date:from; q=dns; s=bmdeda; b=XZUYaq/LNYOyLphsndUgem
	422UPGQF/43GOycEiE9pUk9cBFmI+8y1B3yslcEyumnI/tCvTFkEJbGl9BQg/plD
	hz9jbHJBJoDTIcMPRgqvB6TiiqxOLkcpJxEtqN5YUPW2VTmVZdGFak7ygpeySC4y
	wDAUcfEKFEoE7a5xPj5Ag=

======================================================================================

But if the mails sent from different machines/servers [with differerent
domain names] through this main mail server, then there is this error with DKIM status shown below:

Received-SPF: fail (google.com: domain of xx...@xx... does not designate 206.71.54.52 as permitted sender) client-ip=xx.xx.xx.xx;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of xx...@xx... does not designate xx.xx.xx.xx as permitted sender) smt...@xx...; dkim=neutral (no key) hea...@xx...
Received: from yyyy.com (yyyy.com [127.0.0.1])
	by yyyy.com (Postfix) with ESMTP id C6982DF486E
	for <as...@gm...>; Sat, 25 Jul 2009 06:59:13 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=xxxx.com; h=from:sender
	:to:subject:date:mime-version:content-type:message-id; s=zz;
	 bh=5OPkPeK1CYGuBxed+eaMQTIW55Q=; b=SzGoDTeNrrWlsdZoy6aPMTYQd+o9
	l+UeOO+R1Da3+ZSohgEq0Gf4aW1US+vlqn6ySMPioDpNhztRhNrKEwWbM5TerNZS
	K2jQyRN4pXnSNjRxmhrgEKlmixqhG5EiBHi9FAMAMnxdC6f2GvrLuROPfmLLD7hv
	jT9jJb36gy1G58E=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=xxxx.com; h=from:sender:to
	:subject:date:mime-version:content-type:message-id; q=dns; s=
	zz; b=iVoV6DPkfr3onuaNyFJ4MmsnDYy52iDAvYbCBGwsDWAqJ7uRbs+8mJ
	lY93YI4mHrdw32/rj6qKllDnqho2TFi3h9vw3Ps1Z2FhfNEXAvgPfgocUSGsqsqr
	P+BT6NdrYJdkndKRH3DiKjCgNYD8OQnP7rM3xZc1F1uMcmkWZ1J9M=
======================================================================================


Also;

# cat dkimproxy_out.conf
# specify what address/port DKIMproxy should listen on
listen    127.0.0.1:10027

# specify what address/port DKIMproxy forwards mail to
relay     127.0.0.1:10028

# specify what domains DKIMproxy can sign for (comma-separated, no spaces)
domain    yyyy.com,xxxx.com,qqqq.com,oooo.com

# specify what signatures to add
signature dkim(c=relaxed)
signature domainkeys(c=nofws)

# specify location of the private key
keyfile   /usr/local/src/dkimproxy-1.1/zz-dkim.private.key

# specify the selector (i.e. the name of the key record put in DNS)
selector  zz

================================

Here is my Public Key published in the DNS Records:

"k=rsa; t=y;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5awYwTCZr3DU+Asd+Uz1QtU52LVusyDPWd6u0R7qFbzVPGvxRm15w96q4qzaMj7ceP2dzsmHEhH4u1m31dp9hP9jbOmofsgKBcJETZFBEYfHeTgX3vnH852mHxjwU1j3J9Qx18wCCKyDnK7QOQfisyzcCuVxRMmBNRu4mxVis5wIDAQAB"

===============================


This is an issue, which i need to solve urgently, thatz why bothering you guyz.
Your Help will be greatly appreciated.


 Thanks & Regards,
Zakir H. Shaikh



      Love Cricket? Check out live scores, photos, video highlights and more. Click here http://cricket.yahoo.com