Issue Emails dosen't get signed with DKIM

[shayaneds]

Hello people

My emails dosen't get signed with DKIM and thats why they always land in the SPAM folder.

What to do?

 

[Felted67]

Hello,

did you installed your system with the buildin dns-server as masterzone or are you using a second (outside) dns-system ?
Then you have to switch off the dns-server locally for the used domain and use the external dns-system.

Well, according to that docu it´s relatively easy to setup dmarc/dkim/spf :

DKIM, SPF, and DMARC Protection

I figured out, that using an "external" dns-server is possible without switching off the "local" plesk-dns, when you export all needed dmarc/dkim/spf-txt-values to that external dns-server.

I am currently running several plesk-servers with on-switched internal dns and external dns plus using dmarc/dkim/spf without any issue.

Just the reporting tool from plesk is having an issue - the last closing bracket ">" is missed out when generating reports.

Detlef

 

[shayaneds]

Thanks for reply.
I dont use external dns service.
I can see that the DKIM is not signed. But why? And how can I get it signed?


Thats how the mail header looks like:

eceived: from BY2NAM03HT229.eop-NAM03.prod.protection.outlook.com
 (2603:10a6:6:16::16) by DB4PR05MB0957.eurprd05.prod.outlook.com with HTTPS
 via DB6PR07CA0123.EURPRD07.PROD.OUTLOOK.COM; Mon, 25 Jun 2018 01:17:52 +0000
Received: from BY2NAM03FT036.eop-NAM03.prod.protection.outlook.com
 (10.152.84.59) by BY2NAM03HT229.eop-NAM03.prod.protection.outlook.com
 (10.152.85.8) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.906.15; Mon, 25
 Jun 2018 01:17:50 +0000
Authentication-Results: spf=pass (sender IP is 188.40.108.62)
 smtp.mailfrom=maxbildeler.no; outlook.com; dkim=none (message not signed)
 header.d=none;outlook.com; dmarc=pass action=none header.from=maxbildeler.no;
Received-SPF: Pass (protection.outlook.com: domain of maxbildeler.no
 designates 188.40.108.62 as permitted sender)
 receiver=protection.outlook.com; client-ip=188.40.108.62;
 helo=maxbildeler.no;
Received: from maxbildeler.no (188.40.108.62) by
 BY2NAM03FT036.mail.protection.outlook.com (10.152.85.141) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.20.906.15 via Frontend Transport; Mon, 25 Jun 2018 01:17:49 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:9968DD8474B09CD770099F33623722B57ECFA836AAB11D4F1F6B26582A11D7D3;UpperCasedChecksum:0B1B28E0F4C8049341FF68C9DAD3A9E4DFBDD784C6A9F499BB017796000C7F68;SizeAsReceived:601;Count:14
Received: by server.airsuspension.de (Postfix, from userid 10004)
    id 20D9DAC0A4A; Mon, 25 Jun 2018 03:17:48 +0200 (CEST)

 

[Brujo]

well first go to Plesk Panel > Tools & Settings > Mail Server Settings > DKIM spam protection and check if Allow signing outgoing mail is enabled
then go to Plesk Panel > Domain > Mail > Mail Settings > and check if Use DKIM spam protection system to sign outgoing email messages is enabled for your Domain(s)
then go to Plesk panel > Domain > DNS Settings > and check the TXT Record for DKIM

see also:
How to enable DKIM spam protection for outgoing emails for a separate domain in Plesk?
How to enable DKIM signing for all domains on Plesk for Linux
How to check which subscriptions have DKIM enabled

external tools to check DNS entry for DKIM records:
DomainKeys Identified Mail (DKIM) Record Lookup - DKIM Check - MxToolBox
DKIM, SPF, and Spam Assassin Validator - dkimvalidator.com

and the details are shown in the maillog
Plesk for Linux services logs and configuration files