Forums & Blog

Passing DomainKey authentication and SPAM filtering are two entirely different creatures. You will have to conform to all of Yahoo's rules and regulations on SPAM in order to get this worked out. You could need a RDNS entry and/or an SPF record, you may be labeled as a SPAM server, or you may simply have a shared mail server, etc. You could submit a whitelist request from Yahoo but good luck with that.

I first noticed my troubles when one of my client's domains had several forwards to their accounts at Yahoo. The issue was that they had TONS of SPAM being forwarded to their Yahoo accounts. Yahoo thought my server was the origin of the SPAM, even though it was simply forwarding, and labeled me as a SPAM server. Needless to say most of my mail is delivered to the SPAM folder on Yahoo.

Rob

Ugh. We have both RDNS and SPF (and have for years). So annoying.

I've tried to get us whitelisted before but was told that "our messages are being delivered to the proper folder [spam] as indicated by Yahoo! users" which is ridiculous since even on MY test account at Yahoo! messages get delivered to the spam folder.

It is suggested that you use some strict opt-in/out process for your mailing lists. You may even want to add something like "Please do not mark this message as SPAM. If you wish to remove yourself from our maling list please click here."

When enough Yahoo users mark your messages as spam you are considered a source of spam and you will be filtered out. I know it sucks but they are overly strict on this stuff. Personally it wouldn't hurt my feelings if Yahoo mail crashed and burned for good.

I have to be honest:  reading this entire thread makes me not even want to TRY to install this plugin and implement DomainKeys/DKIM!!!  I'm leaning towards the suggestion of a few posters and just banning Yahoo email users!!!

I have a simple question for now.  I've downloaded the help file from the first post in the thread:

 "- After installation, make sure you take a look at the documentation, as it contains important information on how to configure DKeyEvent"

But I cannot view any of the pages in listed in the index of the help file.  Is anyone else having this issue?  Is there another version of the Help File for this plugin somewhere?

Thanks,

 Derrick

hytekmfg:

I've downloaded the help file from the first post in the thread ... But I cannot view any of the pages in listed in the index of the help file.

Make sure you're not trying to view the file over a network share (or from the site directly); the CHM viewer apparently doesn't like that. Save the file and open it from your HDD. If that fails, try on another computer. 

 I am looking at putting this on a SM 4 server I run that has 244 domains on it, would I have to create 244 entries in DNS and inside the DKeyEvent application for the messages to be signed properly?

Yes, Sir!

If I wanted to use DomainKeys as a spam filter for incoming mail, could I do this after setting up DKeyEvent and then adding a Custom Header or does the spam check happen first? If I can use SM's Custom Header spam filter, what would I put as the values? I don't understand the syntax.. i.e.:

DomainKeys-Signature

pass

-10

 Or does the value need to be different to match passed emails?

Thanks,

Colin 

if you are also in control of the DNS server, and that server is a Microsoft server, you can script that domain key creation record rather easily. It might take a while to get the syntax of the commands correct, but after that, a nice FOR /F statement in a batch file should take care of it.

- t

eliteii92g:

If I wanted to use DomainKeys as a spam filter for incoming mail, could I do this after setting up DKeyEvent and then adding a Custom Header or does the spam check happen first? If I can use SM's Custom Header spam filter, what would I put as the values? I don't understand the syntax..

A basic authentication header looks something like:

Authentication-Results: YOURSERVER from=someone@some.tld; domainkeys=pass

So when setting up filters, you're looking for the 'Authentication-Results' header (and not 'DomainKeys-Signature').

Hi there,

Just to ask I've tried the DKeyEvent 'tool' and all seems well but whilst using your suggested test email address' the 'exhalus.net' response is 'pass' for both DomainKey and DKIM, but the 'sendmail.net' response says DomainKeys are 'Good', but DKIM result is 'Bad'.

 Could it be as sendmail reply suggests below:

(Please note that the DKIM filter signing this reply message conforms to the latest IETF draft version, and thus may not be successfully verified by older implementations.)

Is it my possible setup or is the latest version 0.3.2 achieving what this 'test' site requires please?

Many Thanks.

Sorge:

the 'sendmail.net' response says DomainKeys are 'Good', but DKIM result is 'Bad'.

You should take a look at the attached message; the headers of that message will normally give more information on the reason why a signature failed verification. You should also try some of the other verifiers (check-auth at verifier.port25.com and dkim-test at altn.com).

Thanks for the prompt reply:

I assume you're talking about the message sent by myself and returned with the test results from 'sendmail.net'

If so the header of the message says as below:

 dkim=permerror (verification error: missing parameter(s) in policy data)

I've also tried all your other 'test' send suggestions (port25, exhalus, altn) and all three return a 'pass' for DKIM, the only 'signature confirmed BAD' is from sendmail.net test as above.

So am I doing something wrong or as I'd asked earlier is sendmail testing for a newer version requirement?

Many Thanks

Sorge:

dkim=permerror (verification error: missing parameter(s) in policy data)

So am I doing something wrong or as I'd asked earlier is sendmail testing for a newer version requirement?

There is no newer version. The error message indicates that there is a problem with your policy; revising or removing your policy record should resolve the issue.

someone_else:

The error message indicates that there is a problem with your policy; revising or removing your policy record should resolve the issue.

Last hope!

Many thanks for your previous replies although I’m still not able to get past this issue with ‘sendmail.net’ and its ‘BAD’ response when testing DKIM. As said previously it took just minutes to set up the Domainkey and all is fine there

Could you please answer this question?

Previously I had no DKIM policy in DNS, I have now as you suggested (via the headers) it was failing on ‘policy data’ put a TXT record in and an asp and ssp record also, it still though fails the ‘sendmail.net’ test:

After many tests and changes etc I'm starting to think there may be problems at the reflector of sendmail and not my own settings.

Could you (or anyone else who knows their settings are ok) try out 'sendmail' and verify if it works for your own settings please.

Many thanks once more