Re: [qmailtoaster] DKIM problem.

2020-03-17 Thread Remo Mattei
Hello if you are using Apple Mail it will fail.

Remo

> On Mar 17, 2020, at 09:08, Erald Non  wrote:
> 
> I used both tests test one gave me back Result: fail (signature 
> doesn't verify)
> Checking the dkim key it was using the right one
> Test two gave me Key ok
> 
> 
> 
> 
> Sent from my iPad
> 
>> On Mar 17, 2020, at 8:16 AM, Eric Broch  wrote:
>> 
>> 
>> What methods did you use to test that domain. There are 2 on the link 
>> http://www.qmailtoaster.com/dkim.html 
>> 1) In order to test your settings, simply send an email to: 
>> check-a...@verifier.port25.com  
>> and/or check-au...@verifier.port25.com 
>> 
>>with the suject of "test" (without the quotes) and "Just testing" in the 
>> body (also without quotes). It is best but not required
>>to have a subject and body because this service will also show you how 
>> spamassassin rated your email. If you have a GMAIL or Yahoo
>>email account sending to either or both accounts DKIM signatures could be 
>> verified.
>>Click to test > check-a...@verifier.port25.com?subject=test=Just%20testing>
>> 2) To test your DKIM signature wiith OpenDKIM's 'opendkim-testkey' utility 
>> install opendkim and run the utility:
>>a) # yum install epel-release opendkim
>>b) # opendkim-testkey - -d otherdomain.com  -k 
>> /var/qmail/control/dkim/otherdomain.com.key -s dkim1
>> 
>>   opendkim-testkey: using default configfile /etc/opendkim.conf
>>   opendkim-testkey: /var/qmail/control/dkim/otherdomain.com.key: 
>> WARNING: unsafe permissions
>>   opendkim-testkey: key loaded from 
>> /var/qmail/control/dkim/otherdomain.com.key
>>   opendkim-testkey: checking key 'dkim1._domainkey.otherdomain.com'
>>   opendkim-testkey: key OK
>> 
>> 
>> On 3/17/2020 9:04 AM, Erald Non wrote:
>>> Ok that is clear thank you but remains the problem that the dkim for a 
>>> specific domain is not working. See my original posting what am I missing
>>> 
>>> Sent from my iPad
>>> 
 On Mar 16, 2020, at 11:04 PM, ebr...@whitehorsetc.com 
  wrote:
 
 
 DKIM is the successor to domainkeys (DK). 
 
 Have a look here for an explanation: 
 https://stackoverflow.com/questions/5580136/differences-between-domainkeys-vs-dkim/5668081#5668081
  
 
 
 There are other ways of testing besides yahoo. Look in the notes on the 
 qmailtoaster.com DKIM link. 
 
 Get Outlook for Android 
 
 
 
 On Mon, Mar 16, 2020 at 11:25 PM -0600, "Erald Non" >>> > wrote:
 
 Ok can I use domain keys with dkim? Am confused about the two.
 Yes I do have the dkim keys in the dns and as said the global works but 
 since I have a lot of domains yahoo is sometimes not accepting due to 
 domain mismatch so wanted to setup the keys per domain but there a
 I always get the fail signature doesn’t verify
 I did setup the dns with the new key 
 
 Sent from my iPad
 
 > On Mar 16, 2020, at 8:13 PM, Eric Broch  wrote:
 > 
 > The DK* settings in tcp.smtp are for domainkeys which is different than 
 > domain keys identified mail (dkim).
 > 
 > If you don't use domainkeys you can remove DKSIGN and DKVERIFY from 
 > tcp.smtp and rebuild.
 > 
 > Also, do you have your DKIM key set up in your DNS settings?
 > 
  On 3/16/2020 5:09 PM, Erald (nnservices) wrote:
 >> I have followed the instructions on the page 
 >> http://www.qmailtoaster.net/dkim.html 
 >> 
 >> The global domain keys are working but when I add an domain key for one 
 >> of my domains it indicates me a fail  (signature doesn't verify) when 
 >> testing. The key is there but seems it cannot verify.
 >> My config
 >> 
 >> 
 >> 
 >>   
 >> 
 >> 
 >>   
 >>   
 >> 
 >> 
 >> Am confused about the smtp.tcp and think something is wrong there
 >> 127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
 >> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
 >> This because I have an old /var/qmail/control/domainkeys/%/ directory 
 >> but not for the domain I am trying to get working.
 >> What am I missing
 > 
 > -
 > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
 > 

Re: [qmailtoaster] DKIM problem.

2020-03-17 Thread Erald Non
I used both tests test one gave me back Result: fail (signature doesn't 
verify)
Checking the dkim key it was using the right one
Test two gave me Key ok




Sent from my iPad

> On Mar 17, 2020, at 8:16 AM, Eric Broch  wrote:
> 
> 
> What methods did you use to test that domain. There are 2 on the link 
> http://www.qmailtoaster.com/dkim.html
> 
> 1) In order to test your settings, simply send an email to: 
> check-a...@verifier.port25.com and/or check-au...@verifier.port25.com
>with the suject of "test" (without the quotes) and "Just testing" in the 
> body (also without quotes). It is best but not required
>to have a subject and body because this service will also show you how 
> spamassassin rated your email. If you have a GMAIL or Yahoo
>email account sending to either or both accounts DKIM signatures could be 
> verified.
>Click to test
> 2) To test your DKIM signature wiith OpenDKIM's 'opendkim-testkey' utility 
> install opendkim and run the utility:
>a) # yum install epel-release opendkim
>b) # opendkim-testkey - -d otherdomain.com  -k 
> /var/qmail/control/dkim/otherdomain.com.key -s dkim1
> 
>   opendkim-testkey: using default configfile /etc/opendkim.conf
>   opendkim-testkey: /var/qmail/control/dkim/otherdomain.com.key: WARNING: 
> unsafe permissions
>   opendkim-testkey: key loaded from 
> /var/qmail/control/dkim/otherdomain.com.key
>   opendkim-testkey: checking key 'dkim1._domainkey.otherdomain.com'
>   opendkim-testkey: key OK
> 
> 
>> On 3/17/2020 9:04 AM, Erald Non wrote:
>> Ok that is clear thank you but remains the problem that the dkim for a 
>> specific domain is not working. See my original posting what am I missing
>> 
>> Sent from my iPad
>> 
>>> On Mar 16, 2020, at 11:04 PM, ebr...@whitehorsetc.com wrote:
>>> 
>>> 
>>> DKIM is the successor to domainkeys (DK). 
>>> 
>>> Have a look here for an explanation: 
>>> https://stackoverflow.com/questions/5580136/differences-between-domainkeys-vs-dkim/5668081#5668081
>>> 
>>> There are other ways of testing besides yahoo. Look in the notes on the 
>>> qmailtoaster.com DKIM link. 
>>> 
>>> Get Outlook for Android
>>> 
>>> 
>>> 
>>> 
>>> On Mon, Mar 16, 2020 at 11:25 PM -0600, "Erald Non"  
>>> wrote:
>>> 
 Ok can I use domain keys with dkim? Am confused about the two.
 Yes I do have the dkim keys in the dns and as said the global works but 
 since I have a lot of domains yahoo is sometimes not accepting due to 
 domain mismatch so wanted to setup the keys per domain but there a
 I always get the fail signature doesn’t verify
 I did setup the dns with the new key 
 
 Sent from my iPad
 
 > On Mar 16, 2020, at 8:13 PM, Eric Broch  wrote:
 > 
 > The DK* settings in tcp.smtp are for domainkeys which is different than 
 > domain keys identified mail (dkim).
 > 
 > If you don't use domainkeys you can remove DKSIGN and DKVERIFY from 
 > tcp.smtp and rebuild.
 > 
 > Also, do you have your DKIM key set up in your DNS settings?
 > 
  On 3/16/2020 5:09 PM, Erald (nnservices) wrote:
 >> I have followed the instructions on the page 
 >> http://www.qmailtoaster.net/dkim.html
 >> The global domain keys are working but when I add an domain key for one 
 >> of my domains it indicates me a fail  (signature doesn't verify) when 
 >> testing. The key is there but seems it cannot verify.
 >> My config
 >> 
 >> 
 >> 
 >>   
 >> 
 >> 
 >>   
 >>   
 >> 
 >> 
 >> Am confused about the smtp.tcp and think something is wrong there
 >> 127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
 >> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
 >> This because I have an old /var/qmail/control/domainkeys/%/ directory 
 >> but not for the domain I am trying to get working.
 >> What am I missing
 > 
 > -
 > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 


Re: [qmailtoaster] DKIM problem.

2020-03-17 Thread Eric Broch
What methods did you use to test that domain. There are 2 on the link 
http://www.qmailtoaster.com/dkim.html


1) In order to test your settings, simply send an email to: 
check-a...@verifier.port25.com and/or check-au...@verifier.port25.com
   with the suject of "test" (without the quotes) and "Just testing" in the 
body (also without quotes). It is best but not required
   to have a subject and body because this service will also show you how 
spamassassin rated your email. If you have a GMAIL or Yahoo
   email account sending to either or both accounts DKIM signatures could be 
verified.
   Click to test  
2) To test your DKIM signature wiith OpenDKIM's 'opendkim-testkey' utility 
install opendkim and run the utility:
   a) # yum install epel-release opendkim
   b) # opendkim-testkey - -d otherdomain.com  -k 
/var/qmail/control/dkim/otherdomain.com.key -s dkim1

  opendkim-testkey: using default configfile /etc/opendkim.conf 
opendkim-testkey: /var/qmail/control/dkim/otherdomain.com.key: WARNING: 
unsafe permissions opendkim-testkey: key loaded from 
/var/qmail/control/dkim/otherdomain.com.key opendkim-testkey: checking 
key 'dkim1._domainkey.otherdomain.com' opendkim-testkey: key OK



On 3/17/2020 9:04 AM, Erald Non wrote:
Ok that is clear thank you but remains the problem that the dkim for a 
specific domain is not working. See my original posting what am I missing


Sent from my iPad


On Mar 16, 2020, at 11:04 PM, ebr...@whitehorsetc.com wrote:


DKIM is the successor to domainkeys (DK).

Have a look here for an explanation: 
https://stackoverflow.com/questions/5580136/differences-between-domainkeys-vs-dkim/5668081#5668081


There are other ways of testing besides yahoo. Look in the notes on 
the qmailtoaster.com DKIM link.


Get Outlook for Android 




On Mon, Mar 16, 2020 at 11:25 PM -0600, "Erald Non" 
mailto:er...@nn-services.com>> wrote:


Ok can I use domain keys with dkim? Am confused about the two.
Yes I do have the dkim keys in the dns and as said the global works but 
since I have a lot of domains yahoo is sometimes not accepting due to domain 
mismatch so wanted to setup the keys per domain but there a
I always get the fail signature doesn’t verify
I did setup the dns with the new key

Sent from my iPad

> On Mar 16, 2020, at 8:13 PM, Eric Broch wrote: > > The DK* settings in 
tcp.smtp are for domainkeys which
is different than domain keys identified mail (dkim). > > If you
don't use domainkeys you can remove DKSIGN and DKVERIFY from
tcp.smtp and rebuild. > > Also, do you have your DKIM key set up
in your DNS settings? >  On 3/16/2020 5:09 PM, Erald
(nnservices) wrote: >> I have followed the instructions on the
page http://www.qmailtoaster.net/dkim.html >> The global domain
keys are working but when I add an domain key for one of my
domains it indicates me a fail (signature doesn't verify) when
testing. The key is there but seems it cannot verify. >> My
config >> >> >> >> >> >> >> >> >> >> >> Am confused about the
smtp.tcp and think something is wrong there >>
127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
>>

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
>> This because I have an old /var/qmail/control/domainkeys/%/
directory but not for the domain I am trying to get working. >>
What am I missing > >
-
> To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
-
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com For additional
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Re: [qmailtoaster] DKIM problem.

2020-03-17 Thread Erald Non
Ok that is clear thank you but remains the problem that the dkim for a specific 
domain is not working. See my original posting what am I missing

Sent from my iPad

> On Mar 16, 2020, at 11:04 PM, ebr...@whitehorsetc.com wrote:
> 
> 
> DKIM is the successor to domainkeys (DK). 
> 
> Have a look here for an explanation: 
> https://stackoverflow.com/questions/5580136/differences-between-domainkeys-vs-dkim/5668081#5668081
> 
> There are other ways of testing besides yahoo. Look in the notes on the 
> qmailtoaster.com DKIM link. 
> 
> Get Outlook for Android
> 
> 
> 
> 
>> On Mon, Mar 16, 2020 at 11:25 PM -0600, "Erald Non"  
>> wrote:
>> 
>> Ok can I use domain keys with dkim? Am confused about the two.
>> Yes I do have the dkim keys in the dns and as said the global works but 
>> since I have a lot of domains yahoo is sometimes not accepting due to domain 
>> mismatch so wanted to setup the keys per domain but there a
>> I always get the fail signature doesn’t verify
>> I did setup the dns with the new key 
>> 
>> Sent from my iPad
>> 
>> > On Mar 16, 2020, at 8:13 PM, Eric Broch  wrote:
>> > 
>> > The DK* settings in tcp.smtp are for domainkeys which is different than 
>> > domain keys identified mail (dkim).
>> > 
>> > If you don't use domainkeys you can remove DKSIGN and DKVERIFY from 
>> > tcp.smtp and rebuild.
>> > 
>> > Also, do you have your DKIM key set up in your DNS settings?
>> > 
>>  On 3/16/2020 5:09 PM, Erald (nnservices) wrote:
>> >> I have followed the instructions on the page 
>> >> http://www.qmailtoaster.net/dkim.html
>> >> The global domain keys are working but when I add an domain key for one 
>> >> of my domains it indicates me a fail  (signature doesn't verify) when 
>> >> testing. The key is there but seems it cannot verify.
>> >> My config
>> >> 
>> >> 
>> >> 
>> >>   
>> >> 
>> >> 
>> >>   
>> >>   
>> >> 
>> >> 
>> >> Am confused about the smtp.tcp and think something is wrong there
>> >> 127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
>> >> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
>> >> This because I have an old /var/qmail/control/domainkeys/%/ directory but 
>> >> not for the domain I am trying to get working.
>> >> What am I missing
>> > 
>> > -
>> > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>> > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
>> -
>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 


Re: [qmailtoaster] DKIM problem.

2020-03-17 Thread Eric"s mail
DKIM is the successor to domainkeys (DK). 




Have a look here for an explanation: 
https://stackoverflow.com/questions/5580136/differences-between-domainkeys-vs-dkim/5668081#5668081




There are other ways of testing besides yahoo. Look in the notes on the 
qmailtoaster.com DKIM link. 




Get Outlook for Android







On Mon, Mar 16, 2020 at 11:25 PM -0600, "Erald Non"  
wrote:










Ok can I use domain keys with dkim? Am confused about the two.
Yes I do have the dkim keys in the dns and as said the global works but since I 
have a lot of domains yahoo is sometimes not accepting due to domain mismatch 
so wanted to setup the keys per domain but there a
I always get the fail signature doesn’t verify
I did setup the dns with the new key 

Sent from my iPad

> On Mar 16, 2020, at 8:13 PM, Eric Broch  wrote:
> 
> The DK* settings in tcp.smtp are for domainkeys which is different than 
> domain keys identified mail (dkim).
> 
> If you don't use domainkeys you can remove DKSIGN and DKVERIFY from tcp.smtp 
> and rebuild.
> 
> Also, do you have your DKIM key set up in your DNS settings?
> 
 On 3/16/2020 5:09 PM, Erald (nnservices) wrote:
>> I have followed the instructions on the page 
>> http://www.qmailtoaster.net/dkim.html
>> The global domain keys are working but when I add an domain key for one of 
>> my domains it indicates me a fail  (signature doesn't verify) when testing. 
>> The key is there but seems it cannot verify.
>> My config
>> 
>> 
>> 
>>   
>> 
>> 
>>   
>>   
>> 
>> 
>> Am confused about the smtp.tcp and think something is wrong there
>> 127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
>> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
>> This because I have an old /var/qmail/control/domainkeys/%/ directory but 
>> not for the domain I am trying to get working.
>> What am I missing
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com