dkim/spf problems

Need help? Ask here.

Moderator: Moderators

Post Reply
candrews
Posts: 40
Joined: Thu Jul 24, 2008 11:50 am
Contact:

dkim/spf problems

Post by candrews »

These issues may or may not be rollernet based, but I hope you can help me anyways.

I'm using the automated dkim/spf tester at sa-test@sendmail.net. Here are the results:
Authentication System: DomainKeys Identified Mail
Result: DKIM signature confirmed GOOD
Description: Signature verified, message arrived intact
Reporting host: sendmail.net
More information: http://mipassoc.org/dkim/
Sendmail milter: https://sourceforge.net/projects/dkim-milter/

Authentication System: Domain Keys
Result: DK signature confirmed BAD
Description: Signature verification failed, message may have been
tampered with or corrupted
Reporting host: sendmail.net
More information: http://antispam.yahoo.com/domainkeys
Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/

Authentication System: Sender ID
Result: SID data confirmed BAD
Description: This sender explicitly not permitted to act for the
sending domain
Reporting host: sendmail.net
More information: http://www.microsoft.com/senderid
Sendmail milter: https://sourceforge.net/projects/sid-milter/

Authentication System: Sender Permitted From (SPF)
Result: SPF data confirmed BAD
Description: This sender explicitly not permitted to act for the
sending domain
Reporting host: sendmail.net
More information: http://spf.pobox.com/

First, I don't understand how DKIM can pass, and DomainKeys can fail.
Second, for SenderID, I haven't enabled it on my server. How can I be explicitly not permitted to act if I have no policy in place?
Third, I have an SPF record (both SPF and TXT types): v=spf1 mx include:comcast.net include:auth.spf.rollernet.us ~all Worst case, it should softfail. But why isn't it passing? I'm routing through rollernet's authenticated smtp server.

Thanks!
RollerNetSupport
Site Admin
Posts: 598
Joined: Wed Nov 17, 2004 10:05 pm
Location: Nevada
Contact:

Post by RollerNetSupport »

We'll have to run some tests ourselves and see what it's doing.
Technical Support support@rollernet.us
Roller Network LLC
RollerNetSupport
Site Admin
Posts: 598
Joined: Wed Nov 17, 2004 10:05 pm
Location: Nevada
Contact:

Post by RollerNetSupport »

Here's our own test results sending from support@rollernet.us:
Authentication System: DomainKeys Identified Mail
Result: (no result present)
Reporting host:
More information: http://mipassoc.org/dkim/
Sendmail milter: https://sourceforge.net/projects/dkim-milter/

Authentication System: Domain Keys
Result: (no result present)
Reporting host:
More information: http://antispam.yahoo.com/domainkeys
Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/

Authentication System: Sender ID
Result: SID data confirmed GOOD
Description: Sending host is authorized for sending domain
Reporting host: sendmail.net
More information: http://www.microsoft.com/senderid
Sendmail milter: https://sourceforge.net/projects/sid-milter/

Authentication System: Sender Permitted From (SPF)
Result: SPF data confirmed GOOD
Description: Sending host is authorized for sending domain
Reporting host: sendmail.net
More information: http://spf.pobox.com/
We also use our own authentication server to send mail. DomainKeys and DKIM are different, so it is possible for one to fail and the other succeed.

Could you send us an email privately to support@rollernet.us using the same method you used for the tester so we can take a look at the message headers?
Technical Support support@rollernet.us
Roller Network LLC
candrews
Posts: 40
Joined: Thu Jul 24, 2008 11:50 am
Contact:

Post by candrews »

I sent you an email at 4:13pm entitled "Test message"
RollerNetSupport
Site Admin
Posts: 598
Joined: Wed Nov 17, 2004 10:05 pm
Location: Nevada
Contact:

Post by RollerNetSupport »

We can't find anything wrong. The SPF and DKIM in your message passed our parsers (which use Perl modules from CPAN), and SpamAssassin indicated the DKIM_SIGNED rule.

Code: Select all

Received-SPF: pass (mail2.rollernet.us: domain of candrews@integralblue.com designates 208.79.240.5 as permitted sender)

Code: Select all

X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail2.rollernet.us
X-Spam-Level: 
X-Spam-Status: No, score=-7.4 required=4.6 tests=ALL_TRUSTED,DKIM_SIGNED,
	USER_IN_WHITELIST_TO autolearn=disabled version=3.2.5
Perhaps their parser got tripped up on something, but from our perspective, we have no idea what it could be.
Technical Support support@rollernet.us
Roller Network LLC
Post Reply