System Emails Fail DKIM

tgrand

• May 15, 2018 11:22

Recently setup DKIM and DMARC. Emails from users come from mydomain.com and are passing, however, system emails are coming from hostname.mydomain.com and are failing. How can I resolve this?

• 

  martin MHC

  • May 15, 2018 16:30

  Can you show us your (relevant:aka DMARC / DKIM) DNS values for the different domains? You need DNS entries for both "mydomain.com" and "hostname.mydomain.com", I believe.

  0
• 

  tgrand

  • May 15, 2018 16:40

  Before I do I can already say that spf is defined for the both mydomain.com as well as hostname.mydomain.com. How is it even possible to have a domainkey for a hostname? Values are below.. DNS hosted on Remote DNS server. mydomain.com. IN TXT "v=spf1 mx a ptr:mydomain.com ~all" baldr.mydomain.com. IN TXT "v=spf1 mx a ptr ~all" _dmarc TXT "v=DMARC1; p=none; rua=mailto:me@mydomain.com; ruf=mailto:me.f@mydomain.com;" default._domainkey 14400 IN TXT "v=DKIM1; k=rsa; p=Very Large Key;"

  0
• 

  cPanelMichael

  • May 15, 2018 17:37

  Hello, Are your root notifications configured for delivery to an external email account (e.g. Gmail, Hotmail)? If so, you may need to update the contact address to an email account on the local cPanel server, and then setup a filter or forwarder to forward the notification emails to that external address. I encourage you to vote for the following feature request if you'd like to see an option to configure SMTP authentication for the root notifications:

  0
• 

  QAZwsxED

  • October 05, 2020 01:33

  I recently solved a similar issue. Solution: manually add a Message-Id (note not a Message-ID) header then connect and send an email. cPanel WHM adds a Message-ID header and re-arranges the 'h' record in the DKIM signature which invalidates it, causing a DKIM:fail in the recipients mailbox.

  0

Please sign in to leave a comment.