Issue Issue with DKIM fail (bad signature)

[Reset_Adv_Systems]

Hi there.
I hope some one can help me out here.I am getting a bit mad with this.
I have a client who rents a VPS from Aruba (aruba.it)
the domain of my client is purchased at aruba and is currently the authoritative Name Servers are the Aruba one.
So i use the dns zone from aruba but NOT the Plesk zone.
the SPF and DMARC work fine. I added them to the aruba DNS zone.
I enabled the DKIM on the vps so get:
default._domainkey.domain.com. TXT
Value: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3jPlEkuxGeeQKCxqWBVUmdDMKyfneLi8/PvPklE6kN6lcfwlkQBdIXVPqDtMbnYpeMUP0CCd26JIcRKzq+bPfAtriXrHyE3FLx1akBkvNwTpmSA+5aaQ1jVyg+xlZMUFOWTjnEaiKtmIONLoxQ1ZKQc2ljPnLzg3iuXAvi/7S4wIDAQAB;
And I created a record in the dns zone of Aruba.
But please bear in mind the plesk dns zone is still active.
now when sending emails to gmail or using Prueba DKIM - Verificación de DKIM - Validador DKIM - DKIM Test
it still gives me DKIM-Result: fail (bad signature)
Please also note the current 30+ users use ALL the webmail.domain.tld to send emails. So as you can see all the mails get into the spam folder of the recipients.
I already tried this with no luck:
DKIM does not work: DKIM verify result: DKIM verification failed: signature verification failed

Details of the vps:
Plesk Onxy: v17.8.11_build1708180301.19 os_CentOS 7
OS: CentOS Linux 7.5.1804 (Core)
HD: 1TB
Mem: 4GB

If I turn off the dns zone of the PLESK:
Users will not be able to use the webmail service
Users will not be able to see the web.
OR should I create these records in the dns zone of Aruba
webmail.domain.com. A 95.110.224.128
www.domain.com. CNAME domain.com.
and then turn off the dns zone of the plesk?
Oh..man not sure what to do.
can anyone help me out here, please?
Hoping to hear from some excelent plesk profesionals please
Regards,
Paco
M: +34 619 00 00 51
Skype: paco_getafe

 

[Reset_Adv_Systems]

Good morning.
Can anyone help me out here, plz. Anyone?
Cheers,
Paco

 

[Linulex]

We don't have experience with this particular problem, but i can give some general advise:

- as i understand it, dns is done external, not by the plesk server

1) disable everything not done by plesk, if dns is done external: disable the plesk one. All needed dns records needs to be added to the external dns.
2) DKIM is added by the mailserver. If you use another mailserver, no DKIM header is added
3) DKIM with external dns is explained here

Resolved - DKIM/DomainKey with external DNS ?

more info on DKIM:

What Is DKIM? Everything You Need to Know About Digital Signatures
DomainKeys Identified Mail (DKIM)

hope this helps a bit
regards
Jan

 

[Reset_Adv_Systems]

Dear jan.

Thanks very much for your reply.
Will copy the webmail and www records to the Aruba DNS zone and turn off the plesk dns zone and pray after some propagation time the service works and that the DKIM get´s signed correctly.
In the meantime will read carefully the links you gave me.
Cheers,
Jozef