Question DKIM Signature Body Hash Verified Body Hash Did Not Verify

[PaulTunnicliffe]

Setting up mail for a few new domains using a VPS + plesk hosting websites and mail. Everything was looking good until Office365 hosted email accounts refuse to accept email from us and made us a banned sender. This has made me investigate further.
Newsletters spam test by mail-tester.com
Looks good but thing this only tests the presence of DKIM.

Email Deliverability Tool - Check Your Deliverability Report - MxToolBox

mxtoolbox.com

Gives errors however.

dmarc:truckpages.co.ukShow Solve Email Delivery Problems
dmarc
v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=0:1:d:s;
spf:truckpages.co.uk:77.68.27.65Show Solve Email Delivery Problems
spf
v=spf1 mx a ip4:77.68.27.65 include:_spf.createsend.com -all
dkim:truckpages.co.uk:defaultHide
dkim
Dkim Public Record:v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCAawuXpDuiusv5DqlHtrmmuMzxUdcOOF/3c4SitDySSD3jzXk9uiihWHYhOQ+SKNtyBQUhLf9YSJ2GC0gXWP99/d57UbPMtA5YY6vlR/ZHEzozhpcqYGuGeC1WM7ee6COXhzIpQqRAyO2mMuqi3VooXDs9A+BMRVDCi9idBmRXwIDAQAB;
Dkim Signature:
v=1; a=rsa-sha256; c=relaxed/relaxed; d=truckpages.co.uk; s=default; t=1582021898; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0; h=From:Subject:To; b=MPFUuibC74qh+qpzIIigznS8MsPZpUMSAFjaYAP7lQUUVG5Ky4qBBk8NS4qYagh5i aHaVjjReSbnosa8RDB/4z474by89mEJuGwoBZGDr33QxSddZjyws476o8c5q7UuLDl XDyIAoAs3VRp3PgDwBUFsYRI0GTAHyi3c8V/2SgA=

Tag	TagValue	Name	Description	Warning
l	0	Body length	This tag informs the Verifier of the number of octets in the body of the email after canonicalization included in the cryptographic hash.	length tag is present. Message may allow malicious content

	Test	Result
	DKIM Signature Body Hash Verified	Body Hash Did Not Verify	More Info
	DKIM Signature Syntax Check	The signature is not optimal	More Info
	DNS Record Published	DNS Record found
	DKIM Record Published	DKIM Record found
	DKIM Syntax Check	The record is valid
	DKIM Public Key Check	Public key is present
	DKIM Signature Identifier Match	Signature domain match
	DKIM Signature Alignment	Signature domain in alignment.
	DKIM Signature Duplicate Tags	Signature tags are unique
	DKIM Signature Expiration	The signature is not expired

How can I resolve the body has not verifying? I'm assuming this is Microsofts problem at the moment, I'll ask them to review again later.

Just to further explain the sites, mail are all on the vps, However the nameservers are still with godaddy, therefore the dns is there. I copied the dns entries into godaddy.

Any advice would be great.

 

[IgorG]

Please look at this KB article [BUG] After migration DKIM verification fails: dkim=fail (body hash did not verify)

 

[jamin587]

@IgorG the KB article is not solving the issue for me and others.

 

[jamin587]

Hm i checked now again, it is not failing on "DKIM Signature Body Hash Verified => Body Hash did Not Verify" but on "TDKIM Signature Verified => Signature Did Not Verify"

 

[jamin587]

Here is the report from mxtoolbox Email Header Analyzer, RFC822 Parser - MxToolbox

 

[Koinonia]

did anyone found the solution for this ? I have the same problem.

 

[Maarten.]

The DKIM verification at mxtoolbox.com is known to be buggy.

Try some other tools, like:
- DKIM, SPF, and Spam Assassin Validator - dkimvalidator.com
- Newsletters spam test by mail-tester.com