This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DKIM Problem

I have a problem with DKIM, I've generated the public and private keys by following the instructions here:- https://kb-beta.astaro.com/support/images/c/c8/301879.pdf 

I have my private key within within Astaro and the logs seem to say each email is being signed as they pass through,

2010:05:17-17:28:31 fw exim[17689]: [1\7] 2010-05-17 17:28:31 12Xz9N-0004bD-12 Message signed with DKIM: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; 
2010:05:17-17:28:31 fw exim[17689]: [2\7] d=example.co.uk; s=dkim; h=From:To:Subject[[:D]]ate:Message-ID: 
2010:05:17-17:28:31 fw exim[17689]: [3\7] Content-Type:MIME-Version; bh=rPWvt1MmfkzLIzFvt61TMVvVTW+EXgOZ4M 
2010:05:17-17:28:31 fw exim[17689]: [4\7] HRL7sOHxE=; b=AP+9BFisqUf6skgxP/JY00lPJLjM9vPlg942e7xYQ7Kvf9yyp7 
2010:05:17-17:28:31 fw exim[17689]: [5\7] uhX8NSOUtTwZ/2YTO0Oo3sNWmrsY9YzWOkYOp2yFGoFUxP7U61PlnaTJx80JtpPR 
2010:05:17-17:28:31 fw exim[17689]: [6\7] jEPPQ/GTLWy9aI/4WthbDlV7FNowtPRSVuf5zBYGVe3Vb47F4iu73Hd5o=

I sent an email to check-auth@verifier.port25.com for testing and it says my message isn't signed (obviosuly eample.co.uk isn't my domain - i have changed it for posting here):

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: header.From=owain.baber@example.co.uk
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:         pass (matches From: owain.baber@example.co.uk)
ID(s) verified: header.d=example.co.uk
Canonicalized Headers:
    from:"Owain'20'M.'20'Baber"'20''0D''0A'
    to:"check-auth@verifier.port25.com"'20''0D''0A'
    subject[[:D]]kim'20'test'0D''0A'
    date:Mon,'20'17'20'May'20'2010'20'16:27:32'20'+0000'0D''0A'
    message-id:'0D''0A'
    content-type:multipart/alternative;'20'boundary="_000_FDBA356A2987D44094E393A5AC6152A1098E06C0serverexamplecouk_"'0D''0A'
    mime-version:1.0'0D''0A'
    dkim-signature:v=1;'20'a=rsa-sha256;'20'c=relaxed/relaxed;'20'd=example.co.uk;'20's=dkim;'20'h=From:To:Subject[[:D]]ate:Message-ID:'20'Content-Type:MIME-Version;'20'bh=rPWvt1MmfkzLIzFvt61TMVvVTW+EXgOZ4M'20'HRL7sOHxE=;'20'b=

--------------------------------------------------------------

A quick note: I created dkim.private and dkim.public, the public key in dns seems to be working, the private key is in Astaro including -----BEGIN RSA PRIVATE KEY-----  -----END RSA PRIVATE KEY-----
and I have put the key selector as dkim
I have Exchange 2010 on my internal network and this routes all mail through my astaro box. Also, i don't use an external smart host.

What could be wrong, as I have set this up on two Astaro boxes now and am getting the same results.[:@]

Thanks in advance for any suggestions.


This thread was automatically locked due to age.
Parents
  • Do you have the key "in ASCII armor?"

    -----BEGIN RSA PRIVATE KEY-----
    {your key}
    -----END RSA PRIVATE KEY-----



    Send me an email from the domain you're trying to set up.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Do you have the key "in ASCII armor?"

    -----BEGIN RSA PRIVATE KEY-----
    {your key}
    -----END RSA PRIVATE KEY-----



    Send me an email from the domain you're trying to set up.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data