Email DKIM issues for @mydomain.com

On one of my servers i have an issue with Opendkim not working correctly....

I have done this many times with no issues at it is very easy to do with this Automated script....

Checking the logs i found this:

Code:

no signing table match for 'info@mydomain.com'

Any ideas on what to check?

Thank you

---

 

Problem found but not sure how to fix.....

Checking using:

Code:

cat /etc/opendkim/SigningTable

Code:

*@server.maindomain.com default._domainkey.server.maindomain.com
*@domain2.com default._domainkey.domain2.com
*@domain3.com default._domainkey.domain3.com

There my main domain is missing like this line:

Code:

*@maindomain.com default._domainkey.maindomain.com

But there is a log about my maindomain so i didn't forgot to run Opendkim for it:

Code:

dkim_spf_dns_maindomain.com_150916-012841.txt

But don't know what else i should edit to get this work.....

Which other files need to be edited......Or should i go ahead with a clean option and re run?

I think just running:

Code:

/usr/local/src/centminmod/addons/opendkim.sh maindomain.com

should solve the issue

 

I just test this one:

Code:

/usr/local/src/centminmod/addons/opendkim.sh maindomain.com

and i can see listed now at /etc/opendkim/SigningTable

but now i am getting this error at online mail tester :

Code:

Your DKIM signature is not valid

 

The DKIM signature of your message is:

Code:

   v=1;
   a=rsa-sha256;
   c=relaxed/simple;
   d=maindomain.com;
   s=default;
   t=1488488270;
   bh=uIa6+XxGOoa1gFu4+4mwiFJBs1Bt81F8Zdqr2uV72JY=;
   h=To:Subject:Date:From:Reply-To:From;
   b=hzpCJ7Z+vR7aeZa8dFfR4WVI6iYrfo5Ta4wu36UJpHdeWSpazkDFMmUfzBmyflarJcfZm7DF+tcHb19wghQ0JQOuK1tmrixBnlP564In1/iFXpXmOP9xaVtx9XxgfGNEaAbpV5Wh9byO3D95Wid8rqMzzEM6xaKcJXieR1m2zO4=

Your public key is:

Code:

"v=DKIM1;
k=rsa;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvJLxDK3jbcm4owWz1asY/B/fjgprvymH/p7GFE0FHl84Ndae85rInYZfRDYmE4EgXCp0ayvasxZWl94JxR8oRetuzYCQdpOu3QlCXOC4bdON7w9xij2JJxli3PBxwkf0XrAdUErRaaGtdrT3QYg3ZsOjJhVj0K6j5z4jFsOWUjQIDAQAB"

Key length: 1024bits

Your DKIM signature is not valid

Algorithm doesn't much ? rsa vs rsa-sha256 ?

Just tested on another online service with result:

Code:

Validating Signature:

result = fail
Details: bad RSA signature

But don't know why as i have the same settings for Postifix and Opendkim on my other servers and never had that issue

 

Then the issue may be that i use zoho for my @maindomain.com and the server (opencart) send a mail when a user register using the @maindomain.com and rsa doesn't much?

 

Doesn't seem to have a fix for it

So creating a DKIM there will not help....

When i enable the DKIM there i can see from mail logs that Opencart is trying to send all mails that a user tries to use to root@domain.com

When i disable the Dkim at Zoho all emails are routed at the correct mails that every user uses but signature not match

Hope someone that uses Zoho can help with it ....

 

I have done the above ....

It seems some keys doesn't much or something related is wrong

When a user registers the server generate a welcome email and send it to the user using info@mydomain.com

I am using ZOHO to handle that domain info@mydomain.com but i think there is no related to zoho settings.....

Let me troubleshoot and post here some info that may help....

 

From check-auth2@verifier.port25.com:

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: neutral (message not signed)

Just found that i miss at:

Code:

/etc/opendkim/keys

and

Code:

/etc/opendkim/keys/mydomain.com

the file:

Code:

default.private

as i can see on another server that is working i have that file there......

I can see only two files (default and default.txt)

I think that i will need to regenerate opendkim keys to fix that......?

If yes how?

 

Code:

Mar  4 03:25:57 server postfix/pickup[16973]: 2B574A033E: uid=1001 from=<info@mydomain.com>
Mar  4 03:25:57 server postfix/cleanup[19128]: 2B574A033E: message-id=<20170304032557.2B574A033E@server.mydomain.com>
Mar  4 03:25:57 server opendkim[16994]: 2B574A033E: DKIM-Signature field added (s=default, d=mydomain.com)
Mar  4 03:25:57 server postfix/qmgr[16974]: 2B574A033E: from=<info@mydomain.com>, size=1675, nrcpt=1 (queue active)
Mar  4 03:25:57 server postfix/pickup[16973]: 3C7E4A017E: uid=1001 from=<info@mydomain.com>
Mar  4 03:25:57 server postfix/cleanup[19128]: 3C7E4A017E: message-id=<20170304032557.3C7E4A017E@server.mydomain.com>
Mar  4 03:25:57 server opendkim[16994]: 3C7E4A017E: DKIM-Signature field added (s=default, d=mydomain.com)
Mar  4 03:25:57 server postfix/qmgr[16974]: 3C7E4A017E: from=<info@mydomain.com>, size=1043, nrcpt=1 (queue active)
Mar  4 03:25:57 server postfix/local[19136]: 3C7E4A017E: to=<root@mydomain.com>, orig_to=<info@mydomain.com>, relay=local, delay=0.14, delays=0.09/0.04/0/0, dsn=2.0.0, status=sent (delivered to mailbox)
Mar  4 03:25:57 server postfix/qmgr[16974]: 3C7E4A017E: removed
Mar  4 03:25:59 server postfix/smtp[19133]: Untrusted TLS connection established to mailtest.com[94.23.206.89]:25: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)
Mar  4 03:26:00 server postfix/smtp[19133]: 2B574A033E: to=<blabla@mailtest.com>, relay=mail-tester.com[94.23.206.89]:25, delay=3, delays=0.1/0.12/2.6/0.19, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 181469F7A6)
Mar  4 03:26:00 server postfix/qmgr[16974]: 2B574A033E: removed

And as i can check at online validation services using as selector: default i pass with no issues all checks for Dkim....

So my DNS should be ok..... The sha1 and sha-256 doesn't seem to match

 

Ok thanks George

I am trying to avoid the SMTP and try to use a valid Dkim signature on my server ....

I always do it that way and works... Now i don't know why it doesn't work only for this server....

I just check again on another server and is working...

The only difference is the bounce address that on working server is:

nginx@mydomain.com

and the not working one has:

info@mydomain.com

Also the signed email that is working has the sha256 on it so there is no related issues there...

Anyway i will try to figure it out....

Thanks !

@SFLC

Do you use SMTP for your emails?

Can you please send a mail and check that your Dkim is ok at mail-tester.com ?

 

Another one that i thing the added header may cause this issue:

On working one:
h=To:Subjectate:From;

On not working one:
h=To:Subjectate:From:Reply-To:From;

I think the issue may be here at Reply-To:From; but don't know how to remove it yet

Both checks here are ok:

Check a DKIM Core Key

It has to do with the headers i think and the bounce mail.....

 

Ok problem solved

Please don't hit me on the head

Checking the Dkim key was look at least the first digits and the digits at the end like the ones that i had on my DNS provider and i didn't replace it ...

Now i replace my old key with the key that i was generated and i am getting 10/10 on tests !

It seems the key was not the same but starting and ending with the same letters/digits!

WOW

I will do a test after a few hours just to be sure about it and all seems to be good