FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
srahmat
Staff
Staff
Article Id 391546
Description This article describes how to troubleshoot a DKIM check failure, but FortiMail does not take action on that email.
Scope FortiMail v7.2.x, v7.4.x.
Solution

DKIM Check for fail is enabled in the AntiSpam Profile as per below. 

 

image.png

 

Check the cross-search log, the email failed DKIM check with error 'DKIM Check Failed. The Public Key could not be retrieved or recognized.' But FortiMail does not take action on that email as per the configuration in the AntiSpam profile for DKIM check.

 

image.png

 

This error is because the DKIM record published for the sender domain is not a valid record or the sender has not published the DKIM record for their domain. Hence, the DKIM fail check enabled in the AntiSpam is not take action due to the Fail option is to take action for DKIM invalid body hash or invalid signature.

Contributors