Skip to main content
MCORLOU
MCORLOU
New Member
July 9, 2024
Question

Problem with DKIM associated domains

  • July 9, 2024
  • 1 reply
  • 2633 views

Hello,

 

I've got a problem with my DKIM on associated domains. When people receive mail from us, for parent domain no problem, i've :

dkim=pass (signature was verified)

 

but for associated domains dkim can't be verify, i've :
dkim=fail (signature did not verify)

 

i've the same key on all my parent and associated domain, In Domain "DKIM signing for outgoing email" is enable, an in session "Enable DKIM signing for outgoing messages" is also enable.

 

Could you tell me what is wrong in my settings ? 

 

Thanks

1 reply

AEK
SuperUser
AEK
SuperUser
July 9, 2024

Hello

  • When you show the source of the received mail (mail headers) for the mails that are sent from the associated domains, do you see the DKIM signature as for the mails from the parent domain?
  • Is the DKIM selector in mail headers looks the same as the DNS record name of the DKIM public key?
  • Do you see this behavior when you send to other mail servers (like gmail and others)?
  • Have you enabled DKIM signing for all domains under menu Domains & Users > Domains? And for all outgoing session profiles?
  • Can you ask the remote admins to check further in the mail gateway logs to try find more logs about the DKIM failure? I mean to see if the signature was wrong, if the selector was not found in the public DNS, or any other relevant logs
  • Can you ask the remote admin to run dig/nslookup from his side to check if he can see the selector on your public DNS? (like dig selector._domainkey.example.com)
AEK
    MCORLOU
    MCORLOUAuthor
    New Member
    July 9, 2024

    Hello

    • When you show the source of the received mail (mail headers) for the mails that are sent from the associated domains, do you see the DKIM signature as for the mails from the parent domain?
      • Yes i see it with the good selector 
    • Is the DKIM selector in mail headers look the same as the DNS record name of the DKIM public key?
      • Exactly the same
    • Do you see this behavior when you send to other mail servers (like gmail and others)?
      • Try with M365 and Gmail same behavior, and all serious provider also.
    • Have you enabled DKIM signing for all domains under menu Domains & Users > Domains? And for all outgoing session profiles?
      • Yes and Yes
    • Can you ask the remote admins to check further in the mail gateway logs to try find more logs about the DKIM failure? I mean to see if the signature was wrong, if the selector was not found in the public DNS, or any other relevant logs
      • I'm the administrator for the fortimail and M365, no problem in log

    I'v read this on internet, is that true ? no dkim for associated domains ? 
    https://www.fortinetguru.com/2016/04/configuring-mail-settings/7/

    Terms & ConditionsAccessibility statement