DKIM vs DomainKeys

[jp_reed]

Pardon the question if this is available somewhere else, I have searched and been unable to find an answer. To that end, I have successfully set up DKIM, is there a way to use hMailServer to sign outgoing emails with DomainKeys as well? The reason I ask is Yahoo continually throws email in the spam folder, even though SPF and DKIM pass.

Thanks!

[martin]

No, hMailServer has no DomainKeys implementation. There may be some custom scripts for it in the scripts section.

Are you sure the reason they put it in the trash is because you don't have a DomainKeys set up? DKIM is the new version of DomainKeys.

[jp_reed]

Not a clue why they go there. I've checked blacklists and whatnot and my IP isn't listed. I'm just trying to rule out possibilities.

Thanks for the quick reply!

[sheffters]

I ran DKIM for a while and it was nothing but grief ... some other servers confuse the two and complained about DomainKeys not being provided, even tough I was trying to use DKIM.

Basically, just turn it off imho as its more hassle than its worth.

S.

[martin]

sheffters,
That sounds a bit strange, since they are using separate MIME headers and separate DNS records (if set up properly). There shouldn't be any compatibility problem between the two unless the people who have implemented the verification has in some way confused a two. I guess that's a possibility though..

[sheffters]

elo,

Yeah, talked about this on another thread somewhere when I first had the problem ... it all passed and worked ok, everything was recognised ok etc when using something like te tester check-auth@verifier.port25.com ... but still kept getting bounces from some mail servers ... dont think it was any of the common servers, but enough to be a pain.

You get back something like ...

==========================================================
Summary of Results
==========================================================
SPF check: pass
DomainKeys check: neutral
DKIM check: neutral
Sender-ID check: pass
SpamAssassin check: ham

so I assume it was checking DKIM / DomanKeys properly and it was the foreign servers screwing it up

S.

[smreka]

I'd like to use this topic to ask for help on this matter aswell.

==========================================================
Summary of Results
==========================================================
SPF check: pass
DomainKeys check: neutral
DKIM check: pass
Sender-ID check: pass
SpamAssassin check: ham


This is what I get, but my mail only gets sent to gmail properly. Yahoo and Hotmail just send it to spam/junk folder. I've tried everything. I'm not blacklisted anywhere and well, what else can I try? I've tried with different SPF settings but still no luck. Now I just have "v=spf1 mx -all"

[sheffters]

Your SPF should fail (I think), or itll run as an allow on all, not quite sure.

You want something like (substitute for your ip / mail server etc)

v=spf1 mx:mail.ianbradshaw.co.uk ip4:213.171.198.64 -all

Cheers

S.

[smreka]

Tried this

smreka.com. 7004 IN TXT "v=spf1 mx:mail.smreka.com ip4:89.212.74.5 -all"
smreka.com. 7004 IN TXT "spf2.0/pra"
mail.smreka.com. MX (no records)

And This

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass
ID(s) verified: smtp.mail=test@smreka.com
DNS record(s):
smreka.com. 7200 IN TXT "v=spf1 mx:mail.smreka.com ip4:89.212.74.5 -all"
mail.smreka.com. MX (no records)

Nothing worked. :\

[sheffters]

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass

whats failing?

S.

[smreka]

Nothing is failing. Besides DomainKeys which isnt set shows as neutral. Yahoo shows pass on SPF and DKIM, hotmail doesn't show anything at all about authentication.

[sheffters]

it all passed and worked ok, everything was recognised ok etc when using something like te tester check-auth@verifier.port25.com ... but still kept getting bounces from some mail servers

its a crap implimentation of DomainKeys DKIM on some other servers confusing the settings between the two ... so theres nothing to do but disable DKIM completely ...

thats all that worked for me and I spent weeks trying to et a solution, but the problem isnt on a server under your control, so just have to not use DKIM.

Cheers

S.

[smreka]

Nope it wasn't DKIM 100%. Reason 1 is that it says it's passed and its not confusing it. Reason 2 is it didn't work even when I didn't have DKIM setup, one of the reasons I did set it up is to get pass spam.


I did however fill out two applications at microsoft and yahoo to be added to the whitelist. And I'm expecting a reply from them today or tomorrow.