How the hell do you generate domainkeys????

[105547111]

Mail is not always signed with domainkeys - BUG

I upgraded to 8.4 (the second time it was put up). Okay no hassles upgrade smooth. Had to do two passes as it did not upgrade all the packages, anyway its all up.

I turned on domainkeys for incoming and outgoing. Then I could not send mail, I eventually dug around and found in mail preferences for every single domain you have ro set use domainkeys for outgoing once its enabled in server mail.

Okay I can send mail, but look at my headers...

Content-Type: multipart/mixed; boundary="------------000006020606090008050006"
Date: Fri, 09 May 2008 10:25:20 +1000 [10:25:20 AM EST]
DomainKey-Status:

* no signature
* no signature

Why are there no keys/signatures?

I sent this from one of my domains to the other so its all on the same server and domainkeys are on for everything.

Obviously domainkeys are working now as I see the new field domainkeys in all emails, but its always no sig.

Any help appreciated.

*****

Edit - more info... I can see two new .txt records in every domains DNS so the key IS there, but both horde webmail and thunderbird (when I download the mail) all insiste there are no keys/signing. So why is it not being applied to outgoing mail?


******

Edit more info...

Okay its a bug in plesk. If I send mail externally it is signed (by this I mean the target address must NOT be on the server). I sent two emails from different domains on the server to two external email addresses, bith had domainkeys info in the headers. But if I send mail on my server from one domain to another its not getting signed with the domainkeys...

OR..

Is there a external way of sending yourself a email (by external accounts do not support domainkeys) just to verify that the incoming domainkeys works its not getting stripped off and this maybe what is happening?

FINAL

Okay I found a fantastic email address for testing:
dk@dk.crynwr.com

It will respond back and give you results. It also sends a second message containing a signed email with domainkeys.

It WORKED - so there IS a plesk bug that mail sent from one domain to another is NOT signed with domainkeys on a plesk server..

 

[Spazholio@]

Bump.

I have tried sending from a Plesk account to another, and get no keys. Tried sending external, I still get nothing. Can anyone provide some assistance with this?

 

[meto]

have you enabled signing outgoing mail in your domain->mail menu? setting it in server->mail is not enough

 

[Spazholio@]

Yep. Set it everywhere that the directions said to. DNS entries have been added, but headers always show "no signature"

 

[meto]

have you restarted qmail/rebooted?

 

[105547111]

It definately works external both outgoing and incoming, but NOT within the server to server emails.

I did restart qmail so maybe that is why it works for me?

 

[Spazholio@]

I bounced qmail, but have not restarted. And I don't really intend to - this isn't Windows, where moving the mouse requires a reboot.

Is this tied into qmail, so maybe if I bounce it a few times it will work?

And 105547111, I haven't seen the same thing. Internal to internal, internal to external, none of it generates a DomainKey. The field is there in the headers, but it always says "No signature"

 

[105547111]

You should restart qmail, you simply can do that in the plesk gui in services..

or simply as root:

/etc/init.d/qmail restart

The no signature is something you get internally regardless, but you really need to restart qmail and then try sending a email external.

 

[DCoats]

What are the permissions/user/group settings on your domainkeys file? Are the keys actually in it? For me on freebsd the path is /usr/local/psa/qmail/handlers/before-remote/dd51-domainkeys

 

[Spazholio@]

Took a bit, but I found it:

<server> global # ll
total 0
-r-sr-s--T 1 root root 0 May 8 22:23 dd51-domainkeys
<server> global # pwd
/var/qmail/handlers/before-remote/global
<server> global #

 

[shoggy24]

I did 3 test using the same domain
I sent emails to yahoo and all 3 emails were delivered in the inbox. when i checked the headers the email i sent using a script was marked domainkeys=pass (ok), email sent from horde domainkeys=temperror (cant get key) the last email sent from outlook domainkeys=permerror (no key). Although they were all delivered into yahoos inbox it is interesting how they all had different result considering they were all routed through the same server

 

[Spazholio@]

Weird. I can't seem to duplicate your results. Anyone else have any ideas?

 

[DCoats]

Nope, If I enable domainkeys for any single domain I cant send mail through the server for that domain, Its all rejected with handlers permanentfail

 

[HolmesSPH]

I am having similar issues..

If I login to webmail (horde) and send an email from a domain that has DomainKeys enabled to a Yahoo account, then the headers DO SHOW DomainKeys=Pass(ok), however, if I send an email in PHP Using Mail(), or I send an email from Outlook, outlook express, or Windows Mail all using the POP3 address, these emails DO NOT receive a DomainKeys signature.

Instead they come thru with headers that say DomainKeys=neutral(no sig)

------------------------
Webmail:
domainkeys=pass (ok)
Received: from XXX.XXX.XX.XX(EHLO XXXXX.com) (XXX.XXX.XX.XX)
by mta414.mail.mud.yahoo.com with SMTP; Sun, 18 May 2008 12:49:43 -0700
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=mypraize.com;


-----------------------
Desktop & Mail():
domainkeys=neutral (no sig)


Anyways, if there has been any movement in this bug please let me know.. I am glad that letters are making it to inbox's now, but I really need to figure out how to make ALL emails being sent utilize DomainKeys...

Thanks!

 

[Spazholio@]

Still no luck here. I've sent from my client (Apple Mail), webmail, kept it within the server, sent outside the server, and all I ever get in the headers is:

Domainkey-Status: no signature
Domainkey-Status: no signature

And in the "/usr/local/psa/var/log/maillog" file, I see the following all over the place:

qmail-local-handlers[20777]: call_handlers: stop call handlers because handler 'dd52-domainkeys' not PASS (31)
qmail-local-handlers[20777]: domainkeys-handler exited with status 13

Anyone know how to resolve this?

 

[Justonian]

Domain Keys is case-sensitive

Hey everyone,

I finally was able to get my domain keys working on external e-mails by changing my identity settings to use all lowercase letters in the domain name. For instance, when I had either horde webmail or Outlook set to send from the e-mail address MyName@Domain.com, no signature would be included in the message. However, when I changed it to send mails from MyName@domain.com, with all lowercase letters in the domain name, the domain keys signature would be applied to all external e-mails.

I believe this has something to do with domain keys including in the header that it is signing mails for "s=domain.com," so if qmail thinks that doesn't match exactly, it won't include a valid signature. Unfortunately, I have also been able to replicate the earlier issue of not having signatures included if sending between domains on the same server.

-Justin