A
A
Angelxalfa2015-06-02 15:37:35
Domain Name System
Angelxalfa, 2015-06-02 15:37:35

SPF and DKIM not working?

Hello!
Set up SPF and DKIM. I'm testing through the command line - everything seems to be OK.
66d679b028474197b573a98e65d1d80c.PNG
But when gmail sends messages to spam, no information about SPF and DKIM confirmation is displayed.
9927d74c2a28411e98d580720d68a098.PNG
here are the headers

Delivered-To: [email protected]
Received: by 10.153.11.170 with SMTP id ej10csp2509062lad;
        Tue, 2 Jun 2015 04:31:01 -0700 (PDT)
X-Received: by 10.112.218.67 with SMTP id pe3mr24549336lbc.53.1433244661876;
        Tue, 02 Jun 2015 04:31:01 -0700 (PDT)
Return-Path: <[email protected]>
Received: from assol34.ru ([2a00:f940:2:1:2:0:1:85])
        by mx.google.com with ESMTPS id e8si14822587lah.96.2015.06.02.04.31.01
        for <[email protected]>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 02 Jun 2015 04:31:01 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 2a00:f940:2:1:2:0:1:85 as permitted sender) client-ip=2a00:f940:2:1:2:0:1:85;
Authentication-Results: mx.google.com;
       spf=softfail (google.com: domain of transitioning [email protected] does not designate 2a00:f940:2:1:2:0:1:85 as permitted sender) [email protected]
Received: from assol34.ru ([5.63.155.139])
  by 5-63-155-139.ovz.vps.regruhosting.ru with esmtpa (Exim 4.72)
  (envelope-from <[email protected]>)
  id 1YzkPN-0003U6-D2
  for [email protected]; Tue, 02 Jun 2015 15:31:01 +0400

DNS records:
f09c4182324f4695b43f6c55ac36df3c.PNG
What could be the problem?
I solved the problem with SPF (thanks, Dmitry @Outtruder). It turned out that the mailer sent via IPv6. In the EXIM config, I wrote disable_ipv6 = true and everything is OK.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
S
ShamblerR, 2015-06-02
@ShamblerR

first, show the entry itself in the dns server, moreover, all

N
Nikolai Bryansky, 2015-06-03
@NukerPsych

1. It is very similar that the hoster's dns gives out long records.
> default._domainkey.assol34.ru
Server: google-public-dns-a.google.com
Address: 8.8.8.8 Untrusted
response:
default._domainkey.assol34.ru text =
"v=DKIM1"
2. In the email header I can't see the actual DKIM signature, it looks like the mail server is not configured to use DKIM. Check the logs, there may be problems with access rights to the private key file.

K
kolu4iy, 2015-06-11
@kolu4iy

So you don't have a DKIM signature in the email header. How can google check it?
Take this article and see what's wrong with you. Perhaps, as the previous speaker said, OpenDKIM does not have enough permissions to read the key from the file system. Everything should be in the logs.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question