Control Web Panel
WebPanel => E-Mail => DKIM => Topic started by: dwilliams on March 10, 2022, 02:32:34 PM
-
My sent emails had an error. Your DKIM signature is not valid
I check that in DKIM & SPF Manager it has no record.
https://i.imgur.com/zkr4IMU.png
When I try to add DKIM & SPF to all domains it shows the message "Successful Generation"
https://i.imgur.com/CEkBANz.png
I already tried Rebuild Mail Server and reinstall OpenDKIM but it didn't work.
-
It looks like everything is properly set doing lookups on the domain from your image. Please make sure that opendkim is running on the server.
C:\Users\ryan>dig txt default._domainkey.casavalenthina.com.br
; <<>> DiG 9.16.4 <<>> txt default._domainkey.casavalenthina.com.br
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54760
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;default._domainkey.casavalenthina.com.br. IN TXT
;; ANSWER SECTION:
default._domainkey.casavalenthina.com.br. 14400 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDr++i54uznJiRaItlyZJt4OD+bykNCl+nJ4U0ojUMqXReyDvmr3UdeZ8lrdq40A43LAdzjOLd+r+esZmGdYuL0lusHczEkAo/WKS4PquK3gyZqqz3o/KeL0yzjCX+FemCY+oFLdMyVGJ5kOhvvD1iyqKYtK+u/iQawv9QWrhYCQIDAQAB"
;; Query time: 307 msec
;; SERVER: 192.168.8.1#53(192.168.8.1)
;; WHEN: Thu Mar 10 09:41:37 Eastern Standard Time 2022
;; MSG SIZE rcvd: 316
C:\Users\ryan>dig txt casavalenthina.com.br
; <<>> DiG 9.16.4 <<>> txt casavalenthina.com.br
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49352
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;casavalenthina.com.br. IN TXT
;; ANSWER SECTION:
casavalenthina.com.br. 14400 IN TXT "v=spf1 +a +mx +ip4:45.77.116.228 ~all"
;; Query time: 557 msec
;; SERVER: 192.168.8.1#53(192.168.8.1)
;; WHEN: Thu Mar 10 09:41:58 Eastern Standard Time 2022
;; MSG SIZE rcvd: 100
-
OpenDKIM is active but with warning:
● opendkim.service - DomainKeys Identified Mail (DKIM) Milter
Loaded: loaded (/usr/lib/systemd/system/opendkim.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2022-03-10 12:00:25 -03; 1s ago
Docs: man:opendkim(8)
man:opendkim.conf(5)
man:opendkim-genkey(8)
man:opendkim-genzone(8)
man:opendkim-testadsp(8)
man:opendkim-testkey
http://www.opendkim.org/docs.html
Process: 15823 ExecReload=/bin/kill -USR1 $MAINPID (code=exited, status=0/SUCCESS)
Process: 19230 ExecStart=/usr/sbin/opendkim $OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 19231 (opendkim)
CGroup: /system.slice/opendkim.service
├─19231 /usr/sbin/opendkim -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid
└─19232 /usr/sbin/opendkim -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid
Mar 10 12:00:25 server.paralelo.dev.br systemd[1]: Stopped DomainKeys Identified Mail (DKIM) Milter.
Mar 10 12:00:25 server.paralelo.dev.br systemd[1]: Starting DomainKeys Identified Mail (DKIM) Milter...
Mar 10 12:00:25 server.paralelo.dev.br opendkim[19232]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid)
Mar 10 12:00:25 server.paralelo.dev.br systemd[1]: Can't open PID file /var/run/opendkim/opendkim.pid (yet?) after start: No such file or directory
Mar 10 12:00:25 server.paralelo.dev.br systemd[1]: Started DomainKeys Identified Mail (DKIM) Milter.
-
Try using this tool to see if it's working properly
https://www.dmarcanalyzer.com/dkim/dkim-checker/
if it is, then we can report this as a bug.
-
Well... there is currently a visual bug with that DKIM page. I have 34 records. When selecting view 5, 10 or 25 items, the list shows up with several pages, but if I select 50 or 100, which is higher than the amount of records I have, it will show as empty.
Just like what's happening in your list. You have 8 records, but because the lowest filter you can choose is 10, you won't see them there. To be sure if there is a DKIM record, check the DNS records section in the "List DNS zones"
Testing with
dig txt default._domainkey.casavalenthina.com.br
you don't seem to have one at this moment
Edit: Seems to be there now. Did you just add it again?
If the DKIM service is running fine, (the warning you're getting is possibly a false positive), then run the rebuild of all DNS zones to generate new DKIM and SPF:
/usr/local/cwp/php71/bin/php /etc/opendkim.conf
-
Try using this tool to see if it's working properly
https://www.dmarcanalyzer.com/dkim/dkim-checker/
if it is, then we can report this as a bug.
not work
https://i.imgur.com/otHvKiT.png
-
Well... there is currently a visual bug with that DKIM page. I have 34 records. When selecting view 5, 10 or 25 items, the list shows up with several pages, but if I select 50 or 100, which is higher than the amount of records I have, it will show as empty.
Just like what's happening in your list. You have 8 records, but because the lowest filter you can choose is 10, you won't see them there. To be sure if there is a DKIM record, check the DNS records section in the "List DNS zones"
Testing with
dig txt default._domainkey.casavalenthina.com.br
you don't seem to have one at this moment
Edit: Seems to be there now. Did you just add it again?
If the DKIM service is running fine, (the warning you're getting is possibly a false positive), then run the rebuild of all DNS zones to generate new DKIM and SPF:
/usr/local/cwp/php71/bin/php /etc/opendkim.conf
I checked,
all domains have a dkim record
I also did "RebuildZone
-
Try using this tool to see if it's working properly
https://www.dmarcanalyzer.com/dkim/dkim-checker/
if it is, then we can report this as a bug.
not work
https://i.imgur.com/otHvKiT.png
not working because it should be just "default" in the left field.
Here's the result:
v=DKIM1; k=rsa;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUIYtBnRVJ7ATGYQXGHCO2VNXFsTBA0AnBt
IAKqoGrFVvc979MR56XixKLvn1jXnhY/JFbZgwtyZXDl+2Fj9/cK/S99k38t3p9tbADUjlffUBd
Cs4KaGyO1V2PFRq7tZpPqFJWH4m8z/CqfGNfTdZFz8QMI+gbCR8Awe4vbwpbLQIDAQAB
Worst case scenario; Rebuild your mail server with DKIM/SPF checked. WARNING: This will reset everything in the mail server's configuration, DKIM, and SPF back to default. Just so you know.
Edit: I'm positive this is a DNS related issue. Your DKIM DNS record is failing to show up most of the time when I do multiple dig or Host requests.
What DNS server are these records hosted on?
-
DKIM is working.
Also, I changed the /etc/opendkim.conf file where it was showing file not found.
DKIM & SPF Manager page is not displaying records, but this is a cwp bug.
https://i.imgur.com/y83lPFi.png
Thank you all :)
-
DKIM is working.
Also, I changed the /etc/opendkim.conf file where it was showing file not found.
DKIM & SPF Manager page is not displaying records, but this is a cwp bug.
https://i.imgur.com/y83lPFi.png
Thank you all :)
It is not!
Did you read what I wrote earlier about the visual bug? It's just a visual bug. It's there. The list is not showing up, but it's there.
Your screenshot clearly says "Showing 1 to 8 of 8 entries"
-
DKIM is working.
Also, I changed the /etc/opendkim.conf file where it was showing file not found.
DKIM & SPF Manager page is not displaying records, but this is a cwp bug.
https://i.imgur.com/y83lPFi.png
Thank you all :)
It is not!
Did you read what I wrote earlier about the visual bug? It's just a visual bug. It's there. The list is not showing up, but it's there.
Your screenshot clearly says "Showing 1 to 8 of 8 entries"
Yes, I reported this bug.
Thanks man.
-
This thread is about you not finding your DKIM records at all. This is not just about the visual bug. By the way, the visual bug is already reported and it's available in the next update of CWP.
Run this command to find all your DKIM records:
grep --include=\*.{db,} -rnw '/var/named/' -e 'default._domainkey'
Your issue was diagnosed to be a DNS propagation issue.
Confirm everything is fine with your DKIM using this tool:
https://www.mail-tester.com/
Send an email from one of your emails to this address and see if they tell you whether or not your DKIM is functioning.
I hope this solves your problem.
-
This thread is about you not finding your DKIM records at all. This is not just about the visual bug. By the way, the visual bug is already reported and it's available in the next update of CWP.
Run this command to find all your DKIM records:
grep --include=\*.{db,} -rnw '/var/named/' -e 'default._domainkey'
Your issue was diagnosed to be a DNS propagation issue.
Confirm everything is fine with your DKIM using this tool:
https://www.mail-tester.com/
Send an email from one of your emails to this address and see if they tell you whether or not your DKIM is functioning.
I hope this solves your problem.
I sent an email for testing, result below:
https://i.imgur.com/ltetrsk.png
-
Your DKIM is fine.
As for the visual bug, it's hopefully fixed in the next version of CWP.
And as for the DNS query issue. You should investigate that
-
Your DKIM is fine.
As for the visual bug, it's hopefully fixed in the next version of CWP.
And as for the DNS query issue. You should investigate that
Thanks man.