DKIM vs DomainKeys

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
jp_reed
New user
New user
Posts: 10
Joined: 2009-02-03 20:36

DKIM vs DomainKeys

Post by jp_reed » 2010-01-12 09:10

Pardon the question if this is available somewhere else, I have searched and been unable to find an answer. To that end, I have successfully set up DKIM, is there a way to use hMailServer to sign outgoing emails with DomainKeys as well? The reason I ask is Yahoo continually throws email in the spam folder, even though SPF and DKIM pass.

Thanks!

User avatar
martin
Developer
Developer
Posts: 6834
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Re: DKIM vs DomainKeys

Post by martin » 2010-01-12 09:53

No, hMailServer has no DomainKeys implementation. There may be some custom scripts for it in the scripts section.

Are you sure the reason they put it in the trash is because you don't have a DomainKeys set up? DKIM is the new version of DomainKeys.

jp_reed
New user
New user
Posts: 10
Joined: 2009-02-03 20:36

Re: DKIM vs DomainKeys

Post by jp_reed » 2010-01-12 10:04

Not a clue why they go there. I've checked blacklists and whatnot and my IP isn't listed. I'm just trying to rule out possibilities. :)

Thanks for the quick reply!

User avatar
sheffters
Senior user
Senior user
Posts: 453
Joined: 2009-07-01 20:46
Contact:

Re: DKIM vs DomainKeys

Post by sheffters » 2010-01-12 14:35

I ran DKIM for a while and it was nothing but grief ... some other servers confuse the two and complained about DomainKeys not being provided, even tough I was trying to use DKIM.

Basically, just turn it off imho as its more hassle than its worth.

S.

User avatar
martin
Developer
Developer
Posts: 6834
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Re: DKIM vs DomainKeys

Post by martin » 2010-01-12 14:38

sheffters,
That sounds a bit strange, since they are using separate MIME headers and separate DNS records (if set up properly). There shouldn't be any compatibility problem between the two unless the people who have implemented the verification has in some way confused a two. I guess that's a possibility though..

User avatar
sheffters
Senior user
Senior user
Posts: 453
Joined: 2009-07-01 20:46
Contact:

Re: DKIM vs DomainKeys

Post by sheffters » 2010-01-12 14:47

elo,

Yeah, talked about this on another thread somewhere when I first had the problem ... it all passed and worked ok, everything was recognised ok etc when using something like te tester check-auth@verifier.port25.com ... but still kept getting bounces from some mail servers ... dont think it was any of the common servers, but enough to be a pain.

You get back something like ...

==========================================================
Summary of Results
==========================================================
SPF check: pass
DomainKeys check: neutral
DKIM check: neutral
Sender-ID check: pass
SpamAssassin check: ham

so I assume it was checking DKIM / DomanKeys properly and it was the foreign servers screwing it up

S.

smreka
New user
New user
Posts: 16
Joined: 2009-12-22 06:28

Re: DKIM vs DomainKeys

Post by smreka » 2010-01-12 16:10

I'd like to use this topic to ask for help on this matter aswell.

==========================================================
Summary of Results
==========================================================
SPF check: pass
DomainKeys check: neutral
DKIM check: pass
Sender-ID check: pass
SpamAssassin check: ham


This is what I get, but my mail only gets sent to gmail properly. Yahoo and Hotmail just send it to spam/junk folder. I've tried everything. I'm not blacklisted anywhere and well, what else can I try? I've tried with different SPF settings but still no luck. Now I just have "v=spf1 mx -all"

User avatar
sheffters
Senior user
Senior user
Posts: 453
Joined: 2009-07-01 20:46
Contact:

Re: DKIM vs DomainKeys

Post by sheffters » 2010-01-12 17:03

Your SPF should fail (I think), or itll run as an allow on all, not quite sure.

You want something like (substitute for your ip / mail server etc)
v=spf1 mx:mail.ianbradshaw.co.uk ip4:213.171.198.64 -all
Cheers

S.

smreka
New user
New user
Posts: 16
Joined: 2009-12-22 06:28

Re: DKIM vs DomainKeys

Post by smreka » 2010-01-12 17:57

Tried this
smreka.com. 7004 IN TXT "v=spf1 mx:mail.smreka.com ip4:89.212.74.5 -all"
smreka.com. 7004 IN TXT "spf2.0/pra"
mail.smreka.com. MX (no records)


And This
----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass
ID(s) verified: smtp.mail=test@smreka.com
DNS record(s):
smreka.com. 7200 IN TXT "v=spf1 mx:mail.smreka.com ip4:89.212.74.5 -all"
mail.smreka.com. MX (no records)

Nothing worked. :\

User avatar
sheffters
Senior user
Senior user
Posts: 453
Joined: 2009-07-01 20:46
Contact:

Re: DKIM vs DomainKeys

Post by sheffters » 2010-01-13 15:56

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass
whats failing?

S.

smreka
New user
New user
Posts: 16
Joined: 2009-12-22 06:28

Re: DKIM vs DomainKeys

Post by smreka » 2010-01-13 16:13

Nothing is failing. Besides DomainKeys which isnt set shows as neutral. Yahoo shows pass on SPF and DKIM, hotmail doesn't show anything at all about authentication.

User avatar
sheffters
Senior user
Senior user
Posts: 453
Joined: 2009-07-01 20:46
Contact:

Re: DKIM vs DomainKeys

Post by sheffters » 2010-01-13 16:57

it all passed and worked ok, everything was recognised ok etc when using something like te tester check-auth@verifier.port25.com ... but still kept getting bounces from some mail servers
its a crap implimentation of DomainKeys DKIM on some other servers confusing the settings between the two ... so theres nothing to do but disable DKIM completely ...

thats all that worked for me and I spent weeks trying to et a solution, but the problem isnt on a server under your control, so just have to not use DKIM.

Cheers

S.

smreka
New user
New user
Posts: 16
Joined: 2009-12-22 06:28

Re: DKIM vs DomainKeys

Post by smreka » 2010-01-13 23:05

Nope it wasn't DKIM 100%. Reason 1 is that it says it's passed and its not confusing it. Reason 2 is it didn't work even when I didn't have DKIM setup, one of the reasons I did set it up is to get pass spam.


I did however fill out two applications at microsoft and yahoo to be added to the whitelist. And I'm expecting a reply from them today or tomorrow.

Post Reply