Issue DKIM enabled, yet email is not signed

[rsmits]

Hi there,

I followed all the instructions on KB: How to enable DKIM in Plesk?

My symptom is that DKIM is configured correctly, yet I keep getting the error:
This message does not contain a DKIM Signature when using the validator at dkimvalidator.com.

This is the result of the TXT record of the domain:
dig TXT _domainkey.bestinfo.nl @8.8.8.8 +short
"o=-"

dig TXT default._domainkey.bestinfo.nl @8.8.8.8 +short
"v=DKIM1\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqRqZvJ1xzAa2sPPxwSWHN0EKLMjV/cJx8BEPViSjD77GQtpeity/SVeHOcWiyewK0rtYfAyzFBvDC2paiQt4iUvOOoRu8If8BF+olxGQnx0xF6ZqiAzyOouNYI5gHKBsRKD5OW06JYd1thK9nOEYxJHR7fQmXz8ksKnSra34VzQIDAQAB\;"

I also did execute the following commands:
plesk repair mail bestinfo.nl
/usr/local/psa/bin/domain_pref --update bestinfo.nl -sign_outgoing_mail true


This is somebackground information:
CentOS 6.10 (Final)‬
Product Plesk Onyx
Version 17.8.11 Update #76


Can somebody help me with this issue?

 

[Brujo]

Please check also: DKIM does not work: This message does not contain a DKIM Signature & How to check if DKIM is working on a domain

 

[rsmits]

I already tried that. See the result of the dig commands in the first post.

I don't use an external firewall. I only use the built-in plesk firewall.

Is the plesk firewall causing some problems ?

 

[Brujo]

How are you sending the mail to dkimvalidator.com via Client or webmail? is there something related to dkim or milter warnings in the servers maillog when sending a mail?

 

[rsmits]

I used outlook and webmail to test.
There are no dkim or milter messages of any kind while I'm sending the mail.
I will copy and paste the output in this thread.

 

[rsmits]

Here is the output when I send the mail using webmail (Roundcube):
Dec 14 11:26:10 molenwiek-it postfix/smtpd[24903]: 67A7A91D59: client=localhost[::1], sasl_method=PLAIN, [email protected]
Dec 14 11:26:10 molenwiek-it postfix/cleanup[24414]: 67A7A91D59: message-id=<[email protected]>
Dec 14 11:26:10 molenwiek-it postfix/qmgr[23137]: 67A7A91D59: from=<[email protected]>, size=440, nrcpt=1 (queue active)
Dec 14 11:26:12 molenwiek-it postfix/smtp[24907]: 67A7A91D59: to=<[email protected]>, relay=31045262.in1.mandrillapp.com[54.213.129.255]:25, delay=2, delays=0.06/0.02/1.6/0.35, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 2AF0120E4F)
Dec 14 11:26:12 molenwiek-it postfix/qmgr[23137]: 67A7A91D59: removed

Output of the mail itself:
Received: from molenwiek-it.nl (molenwiek-it.nl [149.210.158.31])
by relay-6.us-west-2.relay-prod (Postfix) with ESMTPS id 2AF0120E4F
for <[email protected]>; Sat, 14 Dec 2019 10:26:12 +0000 (UTC)
Received: from webmail.bestinfo.nl (localhost [IPv6:::1])
by molenwiek-it.nl (Postfix) with ESMTPSA id 67A7A91D59
for <[email protected]>; Sat, 14 Dec 2019 11:26:10 +0100 (CET)
MIME-Version: 1.0
Date: Sat, 14 Dec 2019 11:26:10 +0100
From: [email protected]
To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.8


This is the output when I send the mail using Outlook:
Dec 14 11:28:28 molenwiek-it postfix/smtpd[24981]: 47E049236A: client=84-29-206-72.cable.dynamic.v4.ziggo.nl[84.29.206.72], sasl_method=LOGIN, [email protected]
Dec 14 11:28:28 molenwiek-it postfix/cleanup[24985]: 47E049236A: message-id=<[email protected]>
Dec 14 11:28:28 molenwiek-it postfix/qmgr[23137]: 47E049236A: from=<[email protected]>, size=2845, nrcpt=1 (queue active)
Dec 14 11:28:30 molenwiek-it postfix/smtp[24987]: 47E049236A: to=<[email protected]>, relay=31045262.in1.mandrillapp.com[54.245.105.146]:25, delay=1.8, delays=0.06/0.01/1.4/0.36, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as C0DAB20ECA)
Dec 14 11:28:30 molenwiek-it postfix/qmgr[23137]: 47E049236A: removed

Output of the mail itself:
Received: from molenwiek-it.nl (molenwiek-it.nl [149.210.158.31])
by relay-5.us-west-2.relay-prod (Postfix) with ESMTPS id C0DAB20ECA
for <[email protected]>; Sat, 14 Dec 2019 10:28:29 +0000 (UTC)
Received: from BRIXPC (84-29-206-72.cable.dynamic.v4.ziggo.nl [84.29.206.72])
by molenwiek-it.nl (Postfix) with ESMTPSA id 47E049236A
for <[email protected]>; Sat, 14 Dec 2019 11:28:28 +0100 (CET)
From: "Rene Smits" <[email protected]>
To: <[email protected]>
Subject:
Date: Sat, 14 Dec 2019 11:31:00 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_001A_01D5B271.F5EA28B0"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdWyaZPm1VLXogpyQz+N30f3RAYyNA==
Content-Language: nl
X-Antivirus: AVG (VPS 191213-2, 13-12-2019), Outbound message
X-Antivirus-Status: Clean

This is a multipart message in MIME format.

------=_NextPart_000_001A_01D5B271.F5EA28B0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit




------=_NextPart_000_001A_01D5B271.F5EA28B0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns=3D"urn:schemas-microsoft-comfficeffice" =
xmlns:w=3D"urn:schemas-microsoft-comffice:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"HTML 4.01 Specification"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-mailStijl17
{mso-style-typeersonal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DNL =
link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p =
class=3DMsoNormal><o>&nbsp;</o></p></div></body></html>
------=_NextPart_000_001A_01D5B271.F5EA28B0--

 

[Brujo]

just to be sure on the Plesk Panel > Tools & Settings > Mail Server Settings > Server-Wide Mail Settings > DKIM spam protection > Allow signing outgoing mail is enabled ?

 

[rsmits]

Yes, just double checked it. All three are enabled. See the attachment.

And see also the attachment of the dkim settings of the domain name.

And see the DNS settings of the domain name.

 

[rsmits]

I just updated to Plesk Obsidian (Version 18.0.2) but still no luck.

 

[Brujo]

well that's unfortunate, if nobody else has a good idea, all you can do is open a support ticket at Plesk.