Re: [qmailtoaster] Dkim headache

2017-02-03 Thread Andrew Swartz
FYI... your messages which I am receiving from this list have a bad DKIM
signature, while messages from other gmail.com posters have good DKIM
signatures.

I'm attaching a snapshot of what "DKIM verifier" displays in Thunderbird.

Some listserves do modify the messages in such a way that all mail comes
through like this.  But yours are the only messages from this list that
do not verify (if they have a signature, that is).

-Andy


On 2/3/2017 7:01 AM, ktf4...@gmail.com wrote:
> I've try to contact one of the customer using my Gmail account and this
> mail was also rejected with the same 550 Error.  I start to think that
> they have big problems on their server and that my server is ok.
> 
> 
> Fabio
> 
> 
> In data 03 febbraio 2017 04:46:21 PM  ha scritto:
> 
>> I can ask,  for now all I know is that the server rejected our mail
>> with a
>> "550 Administrative Proibition" error.
>>
>> Fabio
>>
>>
>> In data 03 febbraio 2017 04:34:25 PM Eric Broch 
>> ha scritto:
>>
>>> Can you have the failing customers test the DKIM record for your domain
>>> from their mail servers with something like the following:
>>>
>>> # host -t txt private._domainkey.yourdomain.tld
>>>
>>>
>>> On 2/3/2017 7:54 AM, Fabio Mecchia wrote:
 DKIM-Result: fail (bad signature)
>>>
>>> -- 
>>> Eric Broch, IMSO, DAM, NGOO, DITH, URTS
>>> White Horse Technical Consulting (WHTC)
>>> 406.214.6802
>>>
>>>
>>> -
>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>>
>>
>>
> 
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 

-- 
Andrew W. Swartz, MD
Departments of Emergency Medicine, Family Medicine, and Surgery
Yukon-Kuskokwim Delta Regional Hospital
Bethel, Alaska


smime.p7s
Description: S/MIME Cryptographic Signature


Re: [qmailtoaster] Dkim headache

2017-02-03 Thread ktf4517
I've try to contact one of the customer using my Gmail account and this 
mail was also rejected with the same 550 Error.  I start to think that they 
have big problems on their server and that my server is ok.



Fabio


In data 03 febbraio 2017 04:46:21 PM  ha scritto:


I can ask,  for now all I know is that the server rejected our mail with a
"550 Administrative Proibition" error.

Fabio


In data 03 febbraio 2017 04:34:25 PM Eric Broch 
ha scritto:


Can you have the failing customers test the DKIM record for your domain
from their mail servers with something like the following:

# host -t txt private._domainkey.yourdomain.tld


On 2/3/2017 7:54 AM, Fabio Mecchia wrote:

DKIM-Result: fail (bad signature)


--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)
406.214.6802


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com








-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Re: [qmailtoaster] Dkim headache

2017-02-03 Thread ktf4517
I can ask,  for now all I know is that the server rejected our mail with a 
"550 Administrative Proibition" error.


Fabio


In data 03 febbraio 2017 04:34:25 PM Eric Broch  
ha scritto:



Can you have the failing customers test the DKIM record for your domain
from their mail servers with something like the following:

# host -t txt private._domainkey.yourdomain.tld


On 2/3/2017 7:54 AM, Fabio Mecchia wrote:

DKIM-Result: fail (bad signature)


--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)
406.214.6802


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Re: [qmailtoaster] Dkim headache

2017-02-03 Thread Eric Broch
Can you have the failing customers test the DKIM record for your domain 
from their mail servers with something like the following:


# host -t txt private._domainkey.yourdomain.tld


On 2/3/2017 7:54 AM, Fabio Mecchia wrote:

DKIM-Result: fail (bad signature)


--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)
406.214.6802


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] Dkim headache

2017-02-03 Thread Fabio Mecchia
Hi again,
I'm having a big headache setting up the dkim on my company mail server.
I create a 1024 bit key and set up my dns records also with spf and dmarc.
I've checked it on various test tool:
- mail-tester.com gives me a 10/10 score
- dkimvalidator.com says my signature is valid and pass the test
- the keycheck at dkimcore.org says that my dkim record is valid
- test spf/dkim on mxtoolbox.com give me a valid result

 everything seems perfect 

BUT

- some of our customers are blocking our mail
- on a gmail account reading the headers of my mail  I found "dkim fail
with domain null"
- www.appmaildev.com/it/dkim reports me  "DKIM-Result: fail (bad signature)"
- mail test on en.internet.nl says that "a DKIM record (TXT) could not be
found" but it found the dmarc record (that I set up on dns a day later than
dkim)

Now are more than 36 hours from the last time I've changed a dns records so
I don't think that is a dns propagation problem.
Now I don't know what else I can do to properly setup my server

Thanks in advance
 Fabio Mecchia