Author Topic: DKIM invalid or fail, how to restore to ok ? ? ?  (Read 2278 times)

0 Members and 2 Guests are viewing this topic.

Offline
**
DKIM invalid or fail, how to restore to ok ? ? ?
« on: July 31, 2023, 01:40:36 PM »
All my domains have DKIM fail or invalid.

Button Add DKMI or Button Add DKMI & SPF for all domains dose not help, also rebuilding did not help.

Any ideas what to check, how to fix?

Offline
**
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #1 on: July 31, 2023, 01:59:59 PM »
host gmail-smtp-in.l.google.com[64.233.165.27] said:
    550-5.7.26 This mail is unauthenticated, which poses a security risk to the
    550-5.7.26 sender and Gmail users, and has been blocked. The sender must
    550-5.7.26 authenticate with at least one of SPF or DKIM....

Error once sending to gmail....

Offline
*****
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #2 on: July 31, 2023, 02:15:59 PM »
Is your DNS handled by CWP, or a 3rd part like Cloudflare?

If it's a 3rd party, it's pretty simple, just go into your CWP DNS and copy over the SPF & DKIM records.

Offline
**
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #3 on: July 31, 2023, 03:37:13 PM »
Thank you Stardust  8)

I have a 3rd party DNS at Namecheap

Here is an solution for other users:
1.Create an DKMI at CWP for your domain
2.And do this - https://dmarcly.com/blog/how-to-add-dkim-record-in-namecheap-namecheap-dkim-setup-guide
3.Test it here - https://dmarcly.com/tools/dkim-record-checker

Offline
**
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #4 on: July 31, 2023, 03:48:02 PM »
Strange, still get:

host gmail-smtp-in.l.google.com[64.233.165.26] said:
    550-5.7.26 This mail is unauthenticated, which poses a security risk to the
    550-5.7.26 sender and Gmail users, and has been blocked. The sender must
    550-5.7.26 authenticate with at least one of SPF or DKIM. For this message,
    550-5.7.26 DKIM checks did not pass and SPF check

Will try later

Offline
**
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #5 on: July 31, 2023, 04:52:18 PM »

Offline
*****
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #6 on: July 31, 2023, 05:44:56 PM »
Some DNS changes can take up to 24 hours to propagate.
Just make sure you copy it exactly from CWP to Namecheap, or it can fail.

We suggest Cloudflare, as they have a free plan for DNS hosting, and also offer additional protection.

--

You can test your

DMARC at: https://dmarcian.com/dmarc-inspector/

DKIM Tester: https://dmarcian.com/dkim-inspector/

This does DKIM & SPF: https://dkimvalidator.com/


And then once all that comes back OK:
https://www.mail-tester.com/

Offline
*****
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #7 on: August 01, 2023, 02:20:13 AM »
Which do you recommend:
Starflare?
Cloudburst?

I used to use NameCheap but pivoted away to Cloudflare for domain registration and DNS infrastructure several years ago. Aside from the financial aspects (NameCheap doesn't live up to its name as well as it used to, and Cloudflare is true wholesale pricing), I experienced a DDoS that took down NameCheap's DNS and therefore knocked all my domains offline for hours, affecting numerous clients. That was the last straw that pushed me to switch providers. Plus, Cloudflare's distributed architecture is great, the feature amenities are unmatched, and DNS updates propagate worldwide nearly instantaneously. Win, win, win.

Offline
*****
Re: DKIM invalid or fail, how to restore to ok ? ? ?
« Reply #8 on: August 01, 2023, 02:43:06 AM »
Which do you recommend:
Starflare?
Cloudburst?

I used to use NameCheap but pivoted away to Cloudflare for domain registration and DNS infrastructure several years ago. Aside from the financial aspects (NameCheap doesn't live up to its name as well as it used to, and Cloudflare is true wholesale pricing), I experienced a DDoS that took down NameCheap's DNS and therefore knocked all my domains offline for hours, affecting numerous clients. That was the last straw that pushed me to switch providers. Plus, Cloudflare's distributed architecture is great, the feature amenities are unmatched, and DNS updates propagate worldwide nearly instantaneously. Win, win, win.

Ditto.
We switched from Namecheap to Cloudflare as well.

As they do add that extra level of DDoS protection.

Which is why we suggest them.

Plus they offer they offer DNS resolution:
1.1.1.1
1.0.0.1
2606:4700:4700::1111
2606:4700:4700::1001