DKIM not valid if I don't use...

[idove]

I've noticed that  my email get 10 of 10 at mail-tester.com.

But only if I use my smtp as mail.primarydomain.com, and not as mail.secondarydomain.com.

1. primarydomain.com is my main domain name of server, and all email with other domains on this server get DKIM validation OK only if I use in email client SMTP as mail.primarydomain.com and not as mail.secondarydomain.com or as mail.any-other-domain-on-this-server.com?!?

2. mail.secondarydomain.com is one domain example on this server, and I have few domains on this server


Is there anything wrong with my configuration?
Is there anything wrong with mail-tester.com?

I have try both combination with sending on gmail, and gmail say SPF and DKIM validation pass.

Google -> View Source:

Code: [Select]

SPF: PASS with IP-om xx.xx.xx.xx
DKIM: PASS with domain mysecondarydomain.com

 

[MRatWork]

DKIM already enable for all server if enable 'domainkeys' in 'mail server settings'.

You will see 'TXT record' for '_domainkey' and 'private._domainkey' for each domain.

[idove]

Thank you for your suggestions.
But  I already have in "Server Mail Settings" enabled/checked "Enable Domainkey".
Also in every other domain on this server in Manage DNS I have
TXT, _domainkey and private._domainkey.

So, this was already enabled, is there anything else I can do, or check?

[MRatWork]

Did you used Kloxo-MR 6.5?. Try 'sh /script/fixdomainkey'.

[idove]

I'm using latest 6.5.0.f, now I see that there is 6.5.0 version only. Is this the same?
I check today morning without changing and now it is ok. Maybe mail-tester.com domain has some problems?!!


Anyway, thank you for your tip, it will be very usefull for domain tranfering on new server, with this command I can see now I can regenerate domainkey. Tnx.

[idove]

Problem still exists, I do not understand:

primary-domain.com (everything is fine, if I use this one domain, mail.primary-domain.com as smtp for any secondary-domain mail),

Code: [Select]

primary-domain.com

---
TXT entry in Kloxo MR:
---
v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkOo84k5HBbUVwhujEQBAjiBn3vwLHEWoIehhB3HImOZxJxKeOOwz0Dk0/rXVaDTuhFhUV9s3/OpSrKZ/FvxBxMc6NDWo8A0Ldii9ehyHlPg8DuHkoQCpVz9O2F6Eu1IrlwI3qBQYUDL/kQn4lhjddX/i1f7I/cvu0j/vEhLJd3QIDAQAB

---
Result from mail-tester:
---
Your DKIM signature is valid
DomainKeys Identified Mail (DKIM) is a method for associating a domain name to an email message, thereby allowing a person, role, or organization to claim some responsibility for the message.
The DKIM signature of your message is:

v=1;
a=rsa-sha1;
c=relaxed;
d=de-firmen.com;
h=date:from:to:subject:message-id:mime-version:content-type:content-transfer-encoding;
s=private;
bh=d/WCp4/6nl13989hLxvkham+5Hg=;
b=qNDZ26HqUD6UDWxJLb0Nw3jpn5lzTnj28JqF0e0Sr5Z9Xt8rtm44DmZxkXDlArRntibrHwMl1wCXpZYaykUVZ8gE+S5kb3teCKkNaf/LOdfl5VsMBOdo8kkwlm7B2a40qtn7NTbAKcyUTnHMGJ69vqk3BJy2+y6wSs9D9Xxgqz0=
Your public key is:

"v=DKIM1;
g=*;
k=rsa;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdQfmFsTLi/BshrO8A3M1u5kaY08pfrLizD4S9SPbSCBjJf5ib27dSmhITJOZHlxoVkxaTSJELjtsWJgDeET/piQXpB3GlnTaL2umUKIrHv53OMQtJTwtzmzbg1N7vefOk1NaDMl7dVcaZunJFr5Yp7WKPxaSWLWFE9Q/Saah94wIDAQAB"
Key length: 1024bits

and secondary-domain.com when is used as smtp, mail.secondary-domain.com

Code: [Select]

secondary-domain.com

---
TXT entry in Kloxo MR:
---
v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdQfmFsTLi/BshrO8A3M1u5kaY08pfrLizD4S9SPbSCBjJf5ib27dSmhITJOZHlxoVkxaTSJELjtsWJgDeET/piQXpB3GlnTaL2umUKIrHv53OMQtJTwtzmzbg1N7vefOk1NaDMl7dVcaZunJFr5Yp7WKPxaSWLWFE9Q/Saah94wIDAQAB

---
Result from mail-tester:
---
Your DKIM signature is not valid
DomainKeys Identified Mail (DKIM) is a method for associating a domain name to an email message, thereby allowing a person, role, or organization to claim some responsibility for the message.
The DKIM signature of your message is:

v=1;
a=rsa-sha1;
c=relaxed;
d=de-firmen.com;
h=date:from:to:subject:message-id:mime-version:content-type:content-transfer-encoding;
s=private;
bh=/txFAm6jPThdEY2asJ3unINrbUQ=;
b=v3CCvLH6nuVbYJEu8OTga2HVcpi03ujbLBh4XwxtIlTRA8qt7c0qVtcrMMb2SFhGs3Zo0FotzU1TqXj65S9YVnCwzOmaxx7+bdz8CKacIHh6vxCOQvMjaiHq4ixQIDxrQH+gf4QWEzCb/PtZtWljiPErLBStPNP+XLA476ZMHp8=
Your public key is:

"v=DKIM1;
g=*;
k=rsa;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdQfmFsTLi/BshrO8A3M1u5kaY08pfrLizD4S9SPbSCBjJf5ib27dSmhITJOZHlxoVkxaTSJELjtsWJgDeET/piQXpB3GlnTaL2umUKIrHv53OMQtJTwtzmzbg1N7vefOk1NaDMl7dVcaZunJFr5Yp7WKPxaSWLWFE9Q/Saah94wIDAQAB"
Key length: 1024bits

Your DKIM signature is not valid


Strange right?
What will I get if I start
'sh /script/fixdomainkey' ?

This fill change/update all domains TXT domainkey entry or?

Thank you.

[MRatWork]

What's website for testing your DKIM?.

[idove]

www.mail-tester.com

[idove]

Have you found something, do I need to start DKIM script?
Tnx.

[idove]

And today without any changes test-mailer.com 10/10.
So I suppose there was some problem with mail-tester.com,
also in future I'm testing with sending mail on gmail.com and mail-tester.com as 2nd option.

Thank you,