Skip to main content
EWS
New Member
December 11, 2024
Question

FortiMail - Incoming fails due to DKIM even though DMARC passes with SPF

  • December 11, 2024
  • 2 replies
  • 1500 views

Can someone please explain why this keeps happening?

fortimail.png

Here is the AntiSpam Profile:

FortiMail2.png

 

 

Session Profile:

Fortimail3.png

2 replies

sw2090
SuperUser
SuperUser
December 11, 2024

well the log says it did pass the DMARC and SPF Check  but it failed the DKIM Check due to invalid DKIM signature. THat can happen  because DMARC and SPF are (mail)serverside while the DKIM Signature is part of the message itself.

EWS
EWSAuthor
New Member
December 11, 2024

While i understand how and why DKIM Signatures might fail, i don't understand why FortiMail would still not deliver the mail. Please correct me if im wrong but i thought DMARC only needs SPF or DKIM to be alligned and valid.

 

So in my head FortiMail would see:

1. DKIM failed

2. SPF passed

3. "Even though DKIM failed i should still deliver this mail because SPF passed and therefore DMARC passed as well"

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.