1 (edited by andrew88 2017-06-21 02:28:21)

Topic: how to setup dkim records on zoneedit for second email domain?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.6
- Linux/BSD distribution name and version: ubuntu 16.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Web server (Apache or Nginx):apache
- Manage mail accounts with iRedAdmin-Pro?no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

The first domain i set up is working properly, DKIM is working as expected, no issues there.  The issue is with the second domain i try to add to the server.  Everything is running correctly with it, but i can not figure out ow to get the DKIM records set up correctly for it.  the 2 domains are with different hosting companies, and cant be amalgamated. When i run a dig command on the domain i get the following response back.  This domain is setup on zoneedit.  I should also mention that i have set up a second dkim cert for the boohahaonline domain.

dig -t txt dkim._domainkey.boohahaonline.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t txt dkim._domainkey.boohahaonline.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64546
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;dkim._domainkey.boohahaonline.com. IN  TXT

;; Query time: 89 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Tue Jun 20 11:17:42 ADT 2017
;; MSG SIZE  rcvd: 62

The zoneedit configuration is setup like this
host                                                                     txt
_domainkey.boohahaonline.com                       o=-;
_.domainkey.boohahaonline.com                     k=rsa;p=my-key
_dmarc.boohahaonline.com                           v=DMARC1; p=none
@.boohahaonline.com                                     v=spf1 ip4:74.208.150.106 ~all

Any suggestions as to how fix it?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: how to setup dkim records on zoneedit for second email domain?

Add a sub-domain "dkim._domainkey" for your second mail domain.

3

Re: how to setup dkim records on zoneedit for second email domain?

ZhangHuangbin wrote:

Add a sub-domain "dkim._domainkey" for your second mail domain.

ok, did that and now when i run a dig command i do finally get an answer back.  However when i run amavisd-new testkeys on the server i get the following error message invalid (public key: not available).  Its been approximately 12 hours since i made the changes to the DNS records. 

What else should i be looking at to try and correct this issue?

Thanks

4

Re: how to setup dkim records on zoneedit for second email domain?

When you run amavisd testkeys, was it trying to verify the correct domain name? And when you run 'amavisd showkeys', does the key match the one you publish in DNS?

5 (edited by andrew88 2017-06-23 03:19:57)

Re: how to setup dkim records on zoneedit for second email domain?

ZhangHuangbin wrote:

When you run amavisd testkeys, was it trying to verify the correct domain name? And when you run 'amavisd showkeys', does the key match the one you publish in DNS?

As far as i can see testkeys is verifying the correct domains

TESTING#1 aperturephoto.ca: dkim._domainkey.aperturephoto.ca => pass
TESTING#2 boohahaonline.ca: dkim._domainkey.boohahaonline.ca => invalid (public key: not available)

and yes i have taken the output from showkeys and cut and paste it directly into the dns entry, remove the quotations.

Showkey output
; key#2 1024 bits, i=dkim, d=boohahaonline.ca, /var/lib/dkim/boohahaonline.com.pem
dkim._domainkey.boohahaonline.ca.       3600 TXT (
  "v=DKIM1; p="
  "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlcKB500PlU1dVm+06PXvL0ze3"
  "SLbPpbSFmfjDKaXAceUKFjdfQZYB2GKhbMapeR4COjb66P8HHR/oSmSqMrFcJRR7"
  "1IUf3+AnQADnNw3U09lZAZZGeUK8KFGn/4eGS7LD3WPIoSqVoy9fv42Q0viwM7+K"
  "2KNdj/Ibm/YxJn/A9wIDAQAB")

DNS entry
host                                                                       TXT
dkim._domainkey.boohahaonline.com    v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlcKB500PlU1dVm+06PXvL0ze3SLbPpbSFmfjDKaXAceUKFjdfQZYB2GKhbMapeR4COjb66P8HHR/oSmSqMrFcJRR71IUf3+AnQADnNw3U09lZAZZGeUK8KFGn/4eGS7LD3WPIoSqVoy9fv42Q0viwM7+K2KNdj/Ibm/YxJn/A9wIDAQAB

6

Re: how to setup dkim records on zoneedit for second email domain?

No idea, maybe caused by some kind of DNS cache?

7

Re: how to setup dkim records on zoneedit for second email domain?

WIll it effect anything being like that if it is just some sort of cache issue?