Topic: Problem with qmail

[wolferine]

Hello everybody,

I'm having a problem with my qmail server. I'm trying to turn on my DomainKeys but I't shows bad signature everytime.

I did the DKIM like is shown on wiki contribs, but I dont know how to get my DomainKeys working at all.

I need it because all my emails go to spam box cause they aren't signed.

I have been looking for some information but I dont get any clear information.

If somebody could help me I'll be gratefull

Thanks to all.

[CharlieBrady]

I don't think your problem has anything to do with qmail, which knows nothing about DKIM or DomainKeys. Perhaps you mean qpsmtpd.

I did the DKIM like is shown on wiki contrib...

Perhaps you should be more specific about what you did, what you are seeing, and what you expect to see.

http://pyropus.ca/personal/writings/12-steps-to-qmail-list-bliss.html#step3

[wolferine]

I followed those steps but isn't enough.

http://wiki.contribs.org/Email#Domain_Authentication

[CharlieBrady]

I followed those steps but isn't enough.

http://wiki.contribs.org/Email#Domain_Authentication

Did you look here?

http://bugs.contribs.org/show_bug.cgi?id=4558#c6

[wolferine]

Yes I saw It but I though it isnt for my problem.

I checked sending an email and it shows this:

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   fail
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         fail (bad signature)

So, seeing the report, do you still thinking that I need this patch to solve my problem?

Could you explain me how to use this patch exactly?

Thanks a lot.

[CharlieBrady]

So, seeing the report, do you still thinking that I need this patch to solve my problem?

I would guess so, but I haven't never tried to set up DKIM and don't care enough to try to find out at present.

Could you explain me how to use this patch exactly?

No.

[janet]

wolferine

I followed those steps but isn't enough.
http://wiki.contribs.org/Email#Domain_Authentication

Did you get your ISP to change your DNS zone records, or change them yourself if you have access to them ?

[wolferine]

I would guess so, but I haven't never tried to set up DKIM and don't care enough to try to find out at present.

No.

Ok, thanks anyways.

http://markmail.org/download.xqy?id=pnpkjovxlizmcwar&number=1

Reading this information from patch I read this:

Whether to do DKIM or DomainKeys signing.  Currently only DKIM is supported

It means only DKIM is supported before patching or with patch applied?

wolferine

Did you get your ISP to change your DNS zone records, or change them yourself if you have access to them ?

Don't know what you exactly meant with this, my server ISP is fine with a proper RDNS defined.  And DNS records on my domain name are tested and working fine.

Just a last question for all, specially CharlieBrady. Isn't necessary DomainKeys to avoid that my sent mails goes to spam box? I'm just frustrated with this.

Thanks to you for your attention.

[Daniel B.]

There's nothing to patch. DKIM and DomainKey both work nearly out of the box once you follow this: http://wiki.contribs.org/Email#Domain_Authentication

But you also need to publish your public key in your DNS for others to be able to verify your signature. Something like:

Code: [Select]

default._domainkey 10800 IN TXT "v=DKIM1;k=rsa;p=<your public key here in one single line>"
_domainkey 10800 IN TXT "o=~;r=postmaster@firewall-services.com"

This must be done on the public DNS server managing your zone (not your internal DNS hosted on your SME Server)

[CharlieBrady]

Isn't necessary DomainKeys to avoid that my sent mails goes to spam box?

No, it's not necessary.

[janet]

wolferine

Don't know what you exactly meant with this, my server ISP is fine with a proper RDNS defined.  And DNS records on my domain name are tested and working fine.

Daniel B's answer is what I mean. Ask your ISP or whoever is in charge of your external DNS zone records eg your Registrar or Domain name host