Why Do DKIM Checks Fail?

Discussion in 'Free Hosting' started by mycoo368, Jan 21, 2020.

Thread Status:
Not open for further replies.
  1. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    A friend of mine is using x10 directly to handle email on a subdomain of the x10.mx domain. DKIM is enabled along with SPF and DMARC. Out of the reports that come in, they keep stating that the DKIM has failed and that was why messages get put to Junk boxes. Why do they keep failing.
     
  2. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    Under Emain Manager check the DKIM setting there. try select and switch the email accounts to enable if disable.
    under DNS setting there should be a TXT name "x._domainkey"

    Then wait for DNS propagation.
     
    Last edited: Jan 21, 2020
  3. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    Says DKIM is enabled.
     
  4. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    check the box of the email to authenticate then click "enable dkim"


    then on Account Manager > DNS management there should be a DNS recored Type TXT name "x._domainkey"
     
  5. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    Yes the record is there and propagated. DKIM still fails checks.
     
  6. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    Sorry I can't help you there beyond those step, since I am using Gmail as my email provider instead on local email x10hosting.
     
  7. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    Yeah. I’ve been telling him to move over to Zoho since they’re the only good free one around that’ll allow the use of their own domain as Google and Microsoft have no free option.
     
  8. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    As I see it. They need to configure/sign the email client too but I didn't see anything on roundcube client provided by x10hosting.
     
  9. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    It seems I got it resolved for them. I had them add two addresses on the SPF record. They are on x11 so on top of the IP, I had them add the domain itself and it seemed an xo10.x10hosting.com address was also there, guess the actual hardware, now it seems fine for them.
     
  10. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    Though I also noticed that x10 has decided to impose send limits on the servers of 100 emails per day for the whole account and 50 for any account that is not the main one.

    They also imposed restrictions removing mailing lists, forwarders, and no autoresponders except for vacation messages.
     
    Last edited: Jan 23, 2020
  11. agentxin

    agentxin New Member

    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    @mycoo368 I have the exact same issue with DKIM, I figured out that DirectAdmin puts tabs and newlines into the DKIM record which makes it invalid.
    I don't think there is any way to fix this, however looking through my personal email, I see that many sites do not use DKIM and yet are successfully delivered to inbox. I therefore have disabled DKIM, now I think it is up to the sender reputability that decides whether my emails are marked as spam or not: for clients who have replied in the past to my emails they are now receiving it in inbox, but for new clients they are still getting marked as spam.

    This post has the details of the DKIM problem: [ https://x10hosting.com/community/threads/invalid-dkim-due-to-tabs-inserted.207023/ ]
     
  12. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    A good amount of them use SPF + DKIM checks to determine where the the email would end up. After adjusting the SPF record a bit and then enable DKIM again, seems to make emails go to others’ inboxes.

    EDIT: Seemed to be a fluke. Now they are going back to SPAM boxes. This is the fail reason I get: "key DNS reply corrupt"
     
    Last edited: Jan 24, 2020
  13. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    Now some of them are passing and some are not. I wonder what is not propagating properly. It cant just pass and fail at the same time.
     
  14. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    I know now why DKIM always failed. x10hosting had an email server to collect all emails and filtering it before sending out of x10hosting network as mention here on this post and reply. That email server didn't have the DKIM signature match on user individual DKIM settings hence it will fail if I am right. Still I can send emails even my DMARC policy of reject as long as that email server ip is listed on your SPF settings.
     
  15. Anna

    Anna I am just me Staff Member

    Messages:
    11,050
    Likes Received:
    512
    Trophy Points:
    113
    you are probably right about that, but that relay server was not enabled for DA until a couple days ago (and it was present with cPanel as well since a few years back), before that it went from the server directly (though with the server hostname I guess)
     
  16. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    Well in days of Cpanel it never relay emails I sent out since it never triggers my DMARC policy in my case or it just I never or rarely sent an email in the first place that I overlook the logs send from DMARC. Thank you @Anna for assistance.
     
  17. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    Is that the same IP for all the servers for where email goes through? Whenever I send stuff out it still shows what appears to be a domain but like a hardware host name. Even though I'm on x13, email shows something going through a server xo12.x10hosting.com
     
  18. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    It should be edge.x10hosting or the IP address mention in my other post. I am on mobile hence I can't copy the IP address. Anyway all emails sending out will be sent to this email server regardless where are account host before sending out to intended recipient.
     
  19. mycoo368

    mycoo368 Member

    Messages:
    183
    Likes Received:
    4
    Trophy Points:
    18
    So I should add that IP, when I find it becuase im also on mobile, on the SPF record?
     
  20. cjptomas80

    cjptomas80 Member

    Messages:
    254
    Likes Received:
    6
    Trophy Points:
    18
    You should add the email server ip 198.91.80.251 on SPF.
     
Thread Status:
Not open for further replies.

Share This Page