Question

DKIM and SPF authentication Fails

  • Posted on December 5, 2014
  • moniAsked by Monica

Hi, I have setup DKIM as instructed in the tutorial in DigitalOcean droplet. But it is failing. This is what gets sent when I send an email:

Delivered-To: moni@gmail.com Received: by 10.107.128.93 with SMTP id b90csp230407iod; Fri, 5 Dec 2014 00:07:15 -0800 (PST) X-Received: by 10.224.11.137 with SMTP id t9mr24248446qat.10.1417766835441; Fri, 05 Dec 2014 00:07:15 -0800 (PST) Return-Path: root@aakar3dp.in Received: from aakar3dp.in ([104.236.55.45]) by mx.google.com with ESMTP id b52si34100534qgb.93.2014.12.05.00.07.15 for moni@gmail.com; Fri, 05 Dec 2014 00:07:15 -0800 (PST) Received-SPF: none (google.com: root@aakar3dp.in does not designate permitted sender hosts) client-ip=104.236.55.45; Authentication-Results: mx.google.com; spf=none (google.com: root@aakar3dp.in does not designate permitted sender hosts) smtp.mail=root@aakar3dp.in; dkim=fail header.i=@aakar3dp.in Received: by aakar3dp.in (Postfix, from userid 0) id B7FCA230B1; Fri, 5 Dec 2014 03:07:14 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=aakar3dp.in; s=mail; t=1417766834; bh=ivS0scu/RqmEJ838phoGQZwWVGFY1dKJ9b4F0vie/M4=; h=From:Subject:Date:From; b=GPs6ASPf1nXx0CCjqKasOtyMYthNFkt9qvN1CMvYRYeHZWq0YnAX5hzP4X4+tpc/L DYvNbId8pGAoB0Osp+l1VMm/TfI6viCtF6b4UglU3SRNXSh8LUx2aDhAjADF1aDR2T tsAI346DoiW+cZR5bkTHm5+c/hyPwEKY2X+/HG1I= From:root@aakar3dp.in Subject:hisdsds Message-Id: 20141205080714.B7FCA230B1@aakar3dp.in Date: Fri, 5 Dec 2014 03:06:57 -0500 (EST)

dfgdfgd

Below is my DNS file setting in godaddy account: <^>TXT @ TXT value: “v=spf1 a mx ip4:104.236.55.45 ptr:secureserver.net ~all”

Host:mail._domainkey TXT value: “v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPfYWbz5NrewMStqOI62sDvhFtrok JKxgl/tK90mWP0dXia3Stae60Do208l7LJSKWXdqApw0yTQrdXxxb7hMewDMvaSnc+rAz/9nuxDM0tQ1 UqrTYqINgSmVAHLKJoKIorqRcjXQ/AQO3AoIcEP+HBkpCP6XqUSxj7NxmvA6khwIDAQAB”

What is wrong in above setup?

Show comments

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.

Hello there,

What you can try is to split the record into two parts using quotes and then run another test via mail-tester.com or mxtoolbox. In this way, you can check if the record is valid and if it’s a case of DNS cache and the record not taking immediate effect.

You can also check our article on Why You May Not Want To Run Your Own Mail Server

https://www.digitalocean.com/community/tutorials/why-you-may-not-want-to-run-your-own-mail-server

Regards, Alex

This question was answered by @ionewbie:

hi, my experience:

take a closer look at “Zone File” under DNS records, so you can check your real DKIM spf after inserting :)

PS: just see what you wrote: "Below is my DNS file setting in godaddy account: " you have do it at DigitalOcean DNS …

good luck.

View the original comment