DKIM check details: Result: fail

Submitted by robmkt on Wed, 01/08/2014 - 02:48

Hello,

I tried to add dkim and domain key verification to my emails but each time i check is fail or is netural. please see bellow report.

Much appreciate if someone can give me a tip or something to slove this issues.

I searched 2 weeks around to fix this but never got a worked solution.

Thanks and sorry for my enghlis.

==========================================================

Summary of Results

SPF Check : pass Sender-ID Check : pass DomainKeys Check : neutral DKIM Check : fail

SpamAssassin Check : ham (non-spam) Details:

HELO hostname: cruxemail.com Source IP: 198.100.149.116

mail-from: jamesray@cruxemail.com

SPF check details:

Result: pass ID(s) verified: smtp.mail=jamesray@cruxemail.com DNS record(s): cruxemail.com. 38393 IN TXT "v=spf1 a mx a:cruxemail.com ip4:198.100.149.116 ip6:2607:5300:60:0C74::1 ip6:2607:5300:60:0C74::1 ?all"

Sender-ID check details:

Result: pass

ID(s) verified: smtp.mail=jamesray@cruxemail.com DNS record(s): cruxemail.com. 38393 IN TXT "v=spf1 a mx a:cruxemail.com ip4:198.100.149.116 ip6:2607:5300:60:0C74::1 ip6:2607:5300:60:0C74::1 ?all"

DomainKeys check details:

Result: neutral (message not signed) ID(s) verified: header.From=jamesray@cruxemail.com Selector= domain= DomainKeys DNS Record=

DKIM check details:

Result: fail ID(s) verified: header.From=jamesray@cruxemail.com Selector=defmailkey domain=cruxemail.com DomainKeys DNS Record=defmailkey._domainkey.cruxemail.com

SpamAssassin check details:

SpamAssassin v3.3.1 (2010-03-19)

Result: ham (non-spam) (03.7points, 10.0 required)

pts rule name description

  • 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
  • [score: 0.9998]
  • -0.0 SPF_PASS SPF: sender matches SPF record
  • -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
  • 0.1 HTML_MESSAGE BODY: HTML included in message
  • 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
  • valid
  • 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid X-Spam-Status: Yes, hits=3.7 required=-20.0 tests=BAYES_99,DKIM_SIGNED, HTML_MESSAGE,RP_MATCHES_RCVD,SPF_PASS,T_DKIM_INVALID autolearn=no version=3.3.1 X-Spam-Score: 3.7

To learn more about the terms used in the SpamAssassin report, please search here: http://wiki.apache.org/spamassassin/

========================================================== Explanation of the possible results (adapted from

draft-kucherawy-sender-auth-header-04.txt):

"pass" the message passed the authentication test.

"fail" the message failed the authentication test.

"softfail" the message failed the authentication test, and the authentication method has either an explicit or implicit policy which doesn't require successful authentication of all messages from that domain.

"neutral" the authentication method completed without errors, but was unable to reach either a positive or a negative result about the message.

"temperror" a temporary (recoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a temporary failure retrieving data required for the authentication. A later retry may produce a more final result.

"permerror" a permanent (unrecoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a permanent failure retrieving data required for the authentication.

==========================================================

Original Email From jamesray@cruxemail.com Wed Jan 08 02:29:17 2014
Return-path:
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
s15387396.onlinehome-server.com
X-Spam-Flag: YES
X-Spam-Level: ***
X-Spam-Report:
* 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 0.9998]
* -0.0 SPF_PASS SPF: sender matches SPF record
* -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
* 0.1 HTML_MESSAGE BODY: HTML included in message
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
X-Spam-Status: Yes, hits=3.7 required=-20.0 tests=BAYES_99,DKIM_SIGNED,
HTML_MESSAGE,RP_MATCHES_RCVD,SPF_PASS,T_DKIM_INVALID autolearn=no
version=3.3.1
Envelope-to: check@isnotspam.com
Delivery-date: Wed, 08 Jan 2014 02:29:17 -0600
Received: from cruxemail.com ([198.100.149.116] helo=mail.cruxemail.com)
by s15387396.onlinehome-server.com with esmtp (Exim 4.80.1)
(envelope-from )
id 1W0oVp-0003gB-PE
for check@isnotspam.com; Wed, 08 Jan 2014 02:29:17 -0600
Received: by mail.cruxemail.com (Postfix, from userid 500)
id 7ACBB706A7; Wed, 8 Jan 2014 03:29:14 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=cruxemail.com;
s=defmailkey; t=1389169754;
bh=yJ9IIMaXcgq8IeKy4SptNS+YCUDKAOToiIzBzIZ1Bis=;
h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:
Content-Type:Content-Transfer-Encoding;
b=KHYc60Lg9onPMrGuzvaWenmMMgJM8QvCAyGPmhOejAqH3Rvsl6wIl7Pra9hkKGGQ7
3WvHfWZzjByUA2mqHzQyuTGloMsVFEHqUHrHkFo0atJ6pwRWGPoozWMsYQv3KupdPj
EcTe3iw0xvEk5qXog00ItzLMsY95LJHnugDG8gj8=
To: check@isnotspam.com
Subject: 7Internet marketing strategies
X-PHP-Originating-Script: 500:email.php
Message-ID:
Date: Wed, 08 Jan 2014 03:29:14 -0500
From:
Reply-To: jamesray@cruxemail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_6c9130ee9c8fe0285b980d3b3e454520"
Content-Transfer-Encoding: 8bit
X-DKIM-Status: fail (signature_incorrect)

--b1_6c9130ee9c8fe0285b980d3b3e454520
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

What strategies are you currently using for your business?

Because I've got something important to share with you.

my friend Sharvin Exubrio. These are the 7 strategies all
the big "gurus" in the industry follow.

If you want to build a successful business online, you need
to follow these 7 strategies.

Here's the best thing.

I got a special link to download this for free (and I'm sharing it with
you)



--b1_6c9130ee9c8fe0285b980d3b3e454520
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit

<html>
<head>
</head>
<body>
<span style="font-size: medium; font-family:
tahoma,arial,helvetica,sans-serif;">What strategies are you currently using
for your business?</span><br /><br /><span style="font-size: medium;
font-family: tahoma,arial,helvetica,sans-serif;">Because I've got something
important to share with you.</span><br /><br /><span style="font-size:
medium; font-family: tahoma,arial,helvetica,sans-serif;">my friend Sharvin
Exubrio. These are the 7 strategies all</span><br /><span style="font-size:
medium; font-family: tahoma,arial,helvetica,sans-serif;">the big "gurus" in
the industry follow.</span><br /><br /><span style="font-size: medium;
font-family: tahoma,arial,helvetica,sans-serif;">If you want to build a
successful business online, you need</span><br /><span style="font-size:
medium; font-family: tahoma,arial,helvetica,sans-serif;">to follow these 7
strategies.</span><br /><br /><span style="font-size: medium; font-family:
tahoma,arial,helvetica,sans-serif;">Here's the best thing. </span><br /><br
/><span style="font-size: medium; font-family:
tahoma,arial,helvetica,sans-serif;">I got a special link to download this
for free (and I'm sharing it with you)</span><br /><br />
</body>
</html>

--b1_6c9130ee9c8fe0285b980d3b3e454520--
Status: 
Active

Comments

Submitted by JamieCameron on Thu, 01/09/2014 - 00:30

Can you send me an email at jcameron@virtualmin.com from your Virtualmin system, and then let me know the subject line on this ticket? I'd like to see how my spam filters treat it..

Submitted by JamieCameron on Thu, 01/09/2014 - 01:30

Thanks, I got the email - and the DKIM signature was fine.

You might want to try sending to a few other domains (like gmail) to see if they accept the signature.

Submitted by robmkt on Thu, 01/09/2014 - 01:34

Summary of Results for same email (i sent it to more email adreess included my checker)

==========================================================

Summary of Results

SPF Check : pass Sender-ID Check : pass DomainKeys Check : neutral DKIM Check : fail

SpamAssassin Check : ham (non-spam) Details:

HELO hostname: cruxemail.com Source IP: 198.100.149.116

mail-from: jamesray@cruxemail.com

SPF check details:

Result: pass ID(s) verified: smtp.mail=jamesray@cruxemail.com DNS record(s): cruxemail.com. 38400 IN TXT "v=spf1 a mx a:cruxemail.com ip4:198.100.149.116 ip6:2607:5300:60:0C74::1 ip6:2607:5300:60:0C74::1 ?all"

Sender-ID check details:

Result: pass

ID(s) verified: smtp.mail=jamesray@cruxemail.com DNS record(s): cruxemail.com. 38400 IN TXT "v=spf1 a mx a:cruxemail.com ip4:198.100.149.116 ip6:2607:5300:60:0C74::1 ip6:2607:5300:60:0C74::1 ?all"

DomainKeys check details:

Result: neutral (message not signed) ID(s) verified: header.From=jamesray@cruxemail.com Selector= domain= DomainKeys DNS Record=

DKIM check details:

Result: fail ID(s) verified: header.From=jamesray@cruxemail.com Selector=defkey domain=cruxemail.com DomainKeys DNS Record=defkey._domainkey.cruxemail.com

SpamAssassin check details:

SpamAssassin v3.3.1 (2010-03-19)

Result: ham (non-spam) (04.8points, 10.0 required)

pts rule name description

  • 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
  • [score: 1.0000]
  • -0.0 SPF_PASS SPF: sender matches SPF record
  • -0.1 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
  • 0.1 HTML_MESSAGE BODY: HTML included in message
  • 1.2 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
  • 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
  • valid
  • 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid X-Spam-Status: Yes, hits=4.8 required=-20.0 tests=BAYES_99,DKIM_SIGNED, HTML_IMAGE_ONLY_04,HTML_MESSAGE,RP_MATCHES_RCVD,SPF_PASS,T_DKIM_INVALID autolearn=no version=3.3.1 X-Spam-Score: 4.8

To learn more about the terms used in the SpamAssassin report, please search here: http://wiki.apache.org/spamassassin/

========================================================== Explanation of the possible results (adapted from

draft-kucherawy-sender-auth-header-04.txt):

"pass" the message passed the authentication test.

"fail" the message failed the authentication test.

"softfail" the message failed the authentication test, and the authentication method has either an explicit or implicit policy which doesn't require successful authentication of all messages from that domain.

"neutral" the authentication method completed without errors, but was unable to reach either a positive or a negative result about the message.

"temperror" a temporary (recoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a temporary failure retrieving data required for the authentication. A later retry may produce a more final result.

"permerror" a permanent (unrecoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a permanent failure retrieving data required for the authentication.

==========================================================

Original Email

From bounce@cruxemail.com Thu Jan 09 01:07:06 2014 Return-path: X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on s15387396.onlinehome-server.com X-Spam-Flag: YES X-Spam-Level: **** X-Spam-Report: * 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100% * [score: 1.0000] * -0.0 SPF_PASS SPF: sender matches SPF record * -0.1 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain * 0.1 HTML_MESSAGE BODY: HTML included in message * 1.2 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid X-Spam-Status: Yes, hits=4.8 required=-20.0 tests=BAYES_99,DKIM_SIGNED, HTML_IMAGE_ONLY_04,HTML_MESSAGE,RP_MATCHES_RCVD,SPF_PASS,T_DKIM_INVALID autolearn=no version=3.3.1 Envelope-to: check@isnotspam.com Delivery-date: Thu, 09 Jan 2014 01:07:06 -0600 Received: from cruxemail.com ([198.100.149.116] helo=server1.cruxemail.com) by s15387396.onlinehome-server.com with esmtp (Exim 4.80.1) (envelope-from ) id 1W19hq-0000Rt-DZ for check@isnotspam.com; Thu, 09 Jan 2014 01:07:06 -0600 Received: by server1.cruxemail.com (Postfix, from userid 500) id 98C2D702F8; Thu, 9 Jan 2014 02:07:01 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=cruxemail.com; s=defkey; t=1389251221; bh=uvbfj5IsrBR4g0vob9PyW9Y06Lo4zE91GmxYxnZh8XU=; h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version: List-Unsubscribe:Content-Type:Content-Transfer-Encoding; b=NDYIA+TjHN6zT39fET2WozzCqLd34vlNJphK89CWegvw6tcwrMG3VsEIQb5VsGF10 hI0xPMR7qmq9ZW+AGUdMYAAz9VWCkZlsICEPkVL2pbIn2gcgcvgotW4cVG3nhTajvk vKlKxj34zPz6bvoTHemprVBj7KwCNEwUm88iEef4= To: check@isnotspam.com Subject: DKIM check details: Result: fail X-PHP-Originating-Script: 500:email.php Message-ID: 9b2876da5cd873c2781fc68bc9cd0542@cruxemail.com Date: Thu, 09 Jan 2014 02:07:01 -0500 From: "James Ray" Reply-To: jamesray@cruxemail.com MIME-Version: 1.0 X-Mailer-LID: 2 List-Unsubscribe: X-Mailer-RecptId: 3793 X-Mailer-SID: 16 X-Mailer-Sent-By: 1 Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_c27aac38507c2803266e17c2c26c3767" Content-Transfer-Encoding: 8bit X-DKIM-Status: fail (bodyhash_mismatch)

--b1_c27aac38507c2803266e17c2c26c3767 Content-Type: text/plain; format=flowed; charset="UTF-8" Content-Transfer-Encoding: 8bit

Hi,

You can test my setup, let me know about any issus

Thanks

James Ray

--b1_c27aac38507c2803266e17c2c26c3767 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: 8bit

Hi,

You can test my setup, let me know about any issus

Thanks
James Ray

--b1_c27aac38507c2803266e17c2c26c3767--

Submitted by JamieCameron on Thu, 01/09/2014 - 13:11

Ok .. is your outgoing email relayed though some other mail server?

Also, what mail client are you using - squirrelmail, usermin, thunderbird or something else?

Submitted by robmkt on Thu, 01/09/2014 - 14:21

Interspire email marketer (postfix - devcon) Thats have a sense ? Hope I answered your question.

Submitted by JamieCameron on Thu, 01/09/2014 - 17:12

Does this interspire app perhaps add it's own DKIM headers?

If you send email from the same Virtualmin system using another mail program, does it get valid DKIM headers?