Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
EWS
New Contributor

Created on ‎12-10-2024 10:46 PM

FortiMail - Incoming fails due to DKIM even though DMARC passes with SPF

Can someone please explain why this keeps happening?

fortimail.png

Here is the AntiSpam Profile:

FortiMail2.png

 

 

Session Profile:

Fortimail3.png

Labels:
228
0 Kudos
2 REPLIES 2
sw2090
SuperUser
SuperUser

Created on ‎12-10-2024 11:07 PM

well the log says it did pass the DMARC and SPF Check  but it failed the DKIM Check due to invalid DKIM signature. THat can happen  because DMARC and SPF are (mail)serverside while the DKIM Signature is part of the message itself.

-- 

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
219
0 Kudos
EWS
New Contributor
In response to sw2090

Created on ‎12-10-2024 11:34 PM

While i understand how and why DKIM Signatures might fail, i don't understand why FortiMail would still not deliver the mail. Please correct me if im wrong but i thought DMARC only needs SPF or DKIM to be alligned and valid.

 

So in my head FortiMail would see:

1. DKIM failed

2. SPF passed

3. "Even though DKIM failed i should still deliver this mail because SPF passed and therefore DMARC passed as well"

209
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.