Postfix and DomainKey-Status: bad

[ChristofH]

Hi,
I'm using Plesk 9.2.3 with Postfix and I'm trying to enable DomainKeys for a long time.
When I'm activating Domainkeys within Plesk the DNS Records are correctly created. All the checks on domainkeys.sourceforge.net are ok. But when I'm sending a mail from myself to myself, the message header says "DomainKey-Status: bad". Even when sending mails to a Googlemail account, the Domainkey-Status is bad and Google says "hardfail".
Is this a key problem? If so, where can I find the private key of Plesk's domainkeys?
I already tried "/usr/local/psa/admin/sbin/mchk --with-spam", but it did not help.

Thanks for your help!

Regards,
Christof

 

[IgorG]

Could you please post part of maillog where this problem can be investigated?

 

[ChristofH]

Could you please post part of maillog where this problem can be investigated?

Here are the logs:

mail log:
=============================================================================
Dec 28 10:02:26 HOST postfix/smtpd[9692]: connect from HSI-KBW-0xx-0xx-188-0xx.hsi2.kabel-xxxxxxxxxxxxx.de[xx.xx.188.xx]
Dec 28 10:02:26 HOST postfix/smtpd[9692]: warning: SASL authentication failure: realm changed: authentication aborted
Dec 28 10:02:26 HOST postfix/smtpd[9692]: warning: HSI-KBW-0xx-0xx-188-0xx.hsi2.kabel-xxxxxxxxxxxxx.de[xx.xx.188.xx]: SASL DIGEST-MD5 authentication failed: authentication failure
Dec 28 10:02:26 HOST postfix/smtpd[9779]: connect from HOST.de[127.0.0.1]
Dec 28 10:02:26 HOST postfix/smtpd[9692]: NOQUEUE: client=HSI-KBW-0xx-0xx-188-0xx.hsi2.kabel-xxxxxxxxxxxxx.de[xx.xx.188.xx], sasl_method=LOGIN, sasl_username=mailuser@domain.com
Dec 28 10:02:26 HOST postfix/smtpd[9779]: C426C17248370: client=HSI-KBW-0xx-0xx-188-0xx.hsi2.kabel-xxxxxxxxxxxxx.de[xx.xx.188.xx]
Dec 28 10:02:26 HOST before-remote[9778]: Processing handlers...
Dec 28 10:02:26 HOST before-queue[9776]: Processing handlers...
Dec 28 10:02:26 HOST spf filter[9781]: Starting spf filter...
Dec 28 10:02:26 HOST postfix/cleanup[9780]: C426C17248370: message-id=<!&!AAAAAAAAAAAYAAAAAAAAAOX/xZOqVIdLioqvi1JXO0vCgAAAEAAAAEOoj0lGBi1FuOakDL8wZ8QBAAAAAA==@domain.com>
Dec 28 10:02:26 HOST postfix/qmgr[21809]: C426C17248370: from=<mailuser@domain.com>, size=4486, nrcpt=1 (queue active)
Dec 28 10:02:26 HOST postfix/smtpd[9779]: disconnect from HOST.de[127.0.0.1]
Dec 28 10:02:26 HOST postfix-local[9784]: postfix-local: from=mailuser@domain.com, to=mailuser@domain.com, dirname=/var/qmail/mailnames
Dec 28 10:02:27 HOST spamd[31879]: spamd: got connection over /tmp/spamd_full.sock
Dec 28 10:02:27 HOST spamd[31879]: spamd: using default config for mailuser@domain.com: /var/qmail/mailnames/domain.com/mailuser/.spamassassin/user_prefs
Dec 28 10:02:27 HOST spamd[31879]: spamd: processing message <!&!AAAAAAAAAAAYAAAAAAAAAOX/xZOqVIdLioqvi1JXO0vCgAAAEAAAAEOoj0lGBi1FuOakDL8wZ8QBAAAAAA==@domain.com> for mailuser@domain.com:110
Dec 28 10:02:27 HOST spamd[31879]: spamd: clean message (0.3/5.0) for mailuser@domain.com:110 in 0.3 seconds, 4456 bytes.
Dec 28 10:02:27 HOST spamd[31879]: spamd: result: . 0 - AWL,HTML_FONT_BIG,HTML_MESSAGE,RCVD_IN_PBL scantime=0.3,size=4456,user=mailuser@domain.com,uid=110,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/tmp/spamd_full.sock,mid=<!&!AAAAAAAAAAAYAAAAAAAAAOX/xZOqVIdLioqvi1JXO0vCgAAAEAAAAEOoj0lGBi1FuOakDL8wZ8QBAAAAAA==@domain.com>,autolearn=no
Dec 28 10:02:27 HOST spamd[31877]: prefork: child states: I
Dec 28 10:02:27 HOST postfix/pipe[9783]: C426C17248370: to=<mailuser@domain.com>, relay=plesk_virtual, delay=0.6, delays=0.18/0.01/0/0.41, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Dec 28 10:02:27 HOST postfix/cleanup[9780]: 6048817248374: message-id=<20091228100227.6048817248374@HOST.de>
Dec 28 10:02:27 HOST postfix/bounce[9790]: C426C17248370: sender delivery status notification: 6048817248374
Dec 28 10:02:27 HOST postfix/qmgr[21809]: C426C17248370: removed
Dec 28 10:02:27 HOST postfix/qmgr[21809]: 6048817248374: from=<>, size=3218, nrcpt=1 (queue active)
Dec 28 10:02:27 HOST postfix-local[9791]: postfix-local: from=MAILER-DAEMON, to=mailuser@domain.com, dirname=/var/qmail/mailnames
Dec 28 10:02:27 HOST spamd[31879]: spamd: got connection over /tmp/spamd_full.sock
Dec 28 10:02:27 HOST spamd[31879]: spamd: using default config for mailuser@domain.com: /var/qmail/mailnames/domain.com/mailuser/.spamassassin/user_prefs
Dec 28 10:02:27 HOST spamd[31879]: spamd: processing message <20091228100227.6048817248374@HOST.de> for mailuser@domain.com:110
Dec 28 10:02:28 HOST spamd[31879]: spamd: clean message (0.2/5.0) for mailuser@domain.com:110 in 1.3 seconds, 3248 bytes.
Dec 28 10:02:28 HOST spamd[31879]: spamd: result: . 0 - AWL,NO_RELAYS scantime=1.3,size=3248,user=mailuser@domain.com,uid=110,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/tmp/spamd_full.sock,mid=<20091228100227.6048817248374@HOST.de>,autolearn=ham
Dec 28 10:02:28 HOST spamd[31877]: prefork: child states: I
Dec 28 10:02:28 HOST dk_check[9808]: DK_STAT_NOSIG: No signature available in message
Dec 28 10:02:28 HOST postfix/pipe[9783]: 6048817248374: to=<mailuser@domain.com>, relay=plesk_virtual, delay=1.4, delays=0.02/0/0/1.4, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Dec 28 10:02:28 HOST postfix/qmgr[21809]: 6048817248374: removed
Dec 28 10:02:29 HOST postfix/smtpd[9692]: disconnect from HSI-KBW-0xx-0xx-188-0xx.hsi2.kabel-xxxxxxxxxxxxx.de[xx.xx.188.xx]
=============================================================================


Messager header:
=============================================================================
DomainKey-Status: bad
Return-Path: <mailuser@domain.com>
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb3 (2006-10-05) on HOST.de
X-Spam-Level:
X-Spam-Status: No, score=0.3 required=5.0 tests=AWL,HTML_FONT_BIG,
HTML_MESSAGE,RCVD_IN_PBL autolearn=no version=3.1.7-deb3
X-Original-To: mailuser@domain.com
Delivered-To: mailuser@domain.com
X-No-Auth: unauthenticated sender
Received: from HOST.de (HOST.de [127.0.0.1])
by HOST.de (Postfix) with ESMTP id C426C17248370
for <mailuser@domain.com>; Mon, 28 Dec 2009 10:02:26 +0000 (UTC)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=domain.com;
b=X6W8JXZtMwz5Ry8rMI1l9yKGbaqkqPDbDBQCS7zo6satKL1TT4HZVWjCi/jXbzXmkUwthPMxJits4cTUbQiV0p3jeUax5Qs3Xbu+p0qZ7scq48JIXE+cSpLAZdwUhZS7;
h=Received:Return-Receipt-To:From:To:Subjectate:Message-ID:MIME-Version:Content-Type:X-Mailer:Thread-Index:Content-Languageisposition-Notification-To;
Received: from pc1 (HSI-KBW-0xx-0xx-188-0xx.hsi2.kabel-xxxxxxxxxxxxx.de[xx.xx.188.xx])
by HOST.de (Postfix) with ESMTP
for <mailuser@domain.com>; Mon, 28 Dec 2009 10:02:26 +0000 (UTC)
Return-Receipt-To: "Mail User" <mailuser@domain.com>
From: "Mail User" <mailuser@domain.com>
To: "'Mail User'" <mailuser@domain.com>
Subject: testmail
Date: Mon, 28 Dec 2009 11:02:27 +0100
Message-ID: <!&!AAAAAAAAAAAYAAAAAAAAAOX/xZOqVIdLioqvi1JXO0vCgAAAEAAAAEOoj0lGBi1FuOakDL8wZ8QBAAAAAA==@domain.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_00E2_01CA87AD.3E900BC0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcqHpNyI5Lpcwyp8SHGBxTYAX8y07A==
Content-Language: de
Disposition-Notification-To: "Mail User" <mailuser@domain.com>
=============================================================================

Maybe the "no signature" is the problem. But how can i investigate that?

Thanks!

 

[IgorG]

Thank you for detailed information. I have forwarded it to developers for the further investigation. I will update thread with results as soon as I receive it.

 

[ChristofH]

Any updates?

 

[IgorG]

Any updates?

National holidays in Russia now. Developers will be available after 9 Jan.

 

[lazyd]

Thats interesting. I thought Parallels was an American organisation, not Russian!

 

[ChristofH]

Any updates from Russia?

I found out, that DomainKeys is only working when using the HOST Domain. All other domains are not working.

 

[JulienL]

Dear sir,

i have a dedicated server with 2 domain names installed but both domain has the same problem like ChristofH when sending email to yahoo or gmail i have in the header of the email DomainKey-status: bad.

i have made many research maybe the code of the signature is wrong how can i generate a new code?

regards,

 

[IgorG]

From developers:

Unable to reproduce. Please give me access to client's machine if it is possible.

 

[Mario Romero]

Any updates?

Any updates? I have the same problem.

 

[IgorG]

Developers can't reproduce this problem and no more details have been provided. Therefore request was closed.

 

[Mario Romero]

I'm using plesk 9.4

I'm getting DomainKey-Status: bad sending my emails from microsoft outlook using smtp.
I'm using postfix on a secondary port 25025. Gmail and Yahoo said status Bad, not only Gmail.

The emails sending from my website by using phpmailer (IsSendmail option) has good domain status for Gmail and Yahoo.

How can i fix it?

 

[IgorG]

Please fill this form with all details - http://forum.parallels.com/showthread.php?t=106114
Developers can't reproduce it therefore they need details as much as possible.

 

[David Aguilar]

Hello,

same problem here with all POSTFIX servers installed:

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE : Plesk 10.1.1 , Plesk 9.5.4 ( I have tested on both servers ), CentOS 5.5 X64 and CentOS 5.5 i386 second.

PROBLEM DESCRIPTION AND STEPS TO REPRODUCE : Change the MTA to postfix and DK isn't working anymore. With QMAIL was working OK and no changes in config. Every mail is sent with "DomainKey-Status: bad" flag

ACTUAL RESULT: DomainKey-Status: bad

EXPECTED RESULT: DomainKey-Status: good

 

[David Aguilar]

UPDATE: I have reverted MTA and come back to qmail.

It was telling me the dk-status bad again.. but I figure out that the encriptation of SMTP port has something to do with that.

If i mark STARTTLS on port 25 or 587 ( Submission ) it marks DomainKey-Status: Bad.

If i send mail with port 25 and no encriptation, or 587 and no encriptation, all goes OK

And if I send mail with 465 SSL it returns a : no signature

This three choices, now with QMAIL

 

[IgorG]

Did you read this KB article - http://kb.odin.com/en/6039 ?

 

[David Aguilar]

Yes, It has nothing to do with Webmail or Gmail.

My tests are done with Thunderbird and Domain Key test tools

Thanks,