RE: Looking for appropriate place to ask a DKIM question

"Fazzina, Angelo" <angelo.fazzina@xxxxxxxxx> · Mon, 17 Dec 2018 16:47:31 +0000

Hi, thank you. I did not realize that RFC 6651 was not being implemented.
I will try to get DMARC working.

Everything I read says get SPF working, then DKIM, then DMARC.  I suppose if DMARC sends reports no need for DKIM to do it as well.

Thanks.

-ANGELO FAZZINA

ITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail

angelo@xxxxxxxxx
University of Connecticut,  ITS, SSG, Server Systems
860-486-9075

From: Thiago Souza <thiago@xxxxxxxxx>

Sent: Monday, December 17, 2018 11:41 AM

To: Fazzina, Angelo <angelo.fazzina@xxxxxxxxx>

Cc: ietf@xxxxxxxx

Subject: Re: Looking for appropriate place to ask a DKIM question

Angelo,

It's DMARC that report failures. Usually daily.

The record for your domain is: 

Type: TXT

Host/Name: _DMARC.mta5.uits.uconn.edu

Value: v=DMARC1; p=none; rua=mailto:3bc67bfe@xxxxxxxxxxxxxxxxxxxxxxxxxx; ruf=mailto:3bc67bfe@xxxxxxxxxxxxxxxxxxxxxxxxxx; fo=1

You should be getting e-mails at: 
3bc67bfe@xxxxxxxxxxxxxxxxxxxxxxxxxx and not  dkim-errors@xxxxxxxxxxxxxxxxxxx.

Thiago

Em seg, 17 de dez de 2018 às 14:32, Fazzina, Angelo <angelo.fazzina@xxxxxxxxx> escreveu:

Please ignore if I posted in the wrong mailing list as I am have trouble find one for DKIM that is active.

Hi, I am trying to test my TXT records for the ability to report failures. Talking about RFC 6651

These are my records

dkim1._domainkey.mta5.uits.uconn.edu   
 text = "v=DKIM1\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/YIuJIABa9M7Ox5AXs6CP6z26d/i9JDrHW58YU/OzfsEr6yADboIOydCaiiVaNuwtkbx
catzd6/iutxWbAiY51rRAvVdBs2YIoGO6Glzeev66ft8IfMnHgxND438KIsdOjUmJZuglFJUWGzCYDSC1eq/zqDVncFwTxWkKW/qtxQIDAQAB"

_report._domainkey.mta5.uits.uconn.edu 
 text = "ra=dkim-errors\; rp=100\; rr=all"

Here is a test email sig header
v=1; a=rsa-sha256; c=relaxed/simple; d=mta5.uits.uconn.edu;
 s=dkim1; t=1544820643; r=y; bh=9ZoLOUiYT9ubu7ykLiU305ZLqHeoTNV83po4QgGRepU=; h=To:From:Subject:Date:From; b=uPOMfVq7Ilr0/e2GEwEIiRotuX1gacod2Tmk7c1lfcYUpNTUznjUXPyNidTlbhrLA ylDHc1xE1P/B1NBo0awxBN4Qbwjz8UWUC1vQpQsrenWnhr+Rp46g7KKqWWZ2Sjw0O0 0RV2EF9aD1UP5bd7qLtuQHQ9gye5cVCBv6uVdM7g=

Here is a test email result header
spf=none (sender IP is 137.99.25.249) smtp.mailfrom=appmail.uconn.edu;

uconn.mail.onmicrosoft.com; dkim=fail (invalid public key) header.d=mta5.uits.uconn.edu;uconn.mail.onmicrosoft.com;
 dmarc=none action="" header.from=appmail.uconn.edu;compauth=pass
 reason=105

So I can simulate a failure, but cannot seem to get a report emailed to
dkim-errors@xxxxxxxxxxxxxxxxxxx ?

I made sure account exists on server:
[root@mta5 home]# ls -l /home/|grep dkim
drwx------. 2 dkim-errors       dkim-errors         78 Dec 10 16:21 dkim-errors

How often are the failure reports generated ? did not see that mentioned in the RFC’s ?

Does anyone see anything obvious that I am doing wrong ?
Thank you.

-ANGELO FAZZINA

ITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail

angelo@xxxxxxxxx
University of Connecticut,  ITS, SSG, Server Systems
860-486-9075