Re: Looking for appropriate place to ask a DKIM question

Thiago Souza <thiago=40ts.eng.br@xxxxxxxxxxxxxx> · Mon, 17 Dec 2018 14:48:39 -0200

I'm sorry. You do not have a DMARC record. I used a online tool to check, and it suggested one since you do not have.

Create a record like:

TXT

_DMARC.mta5.uits.uconn.edu

v=DMARC1; p=none; rua=dkim-errors@xxxxxxxxxxxxxxxxxxx; ruf=mailto:dkim-errors@xxxxxxxxxxxxxxxxxxx; rf=afrf; fo=1; pct=100; adkim=s; aspf=s
Note the p=none, to do not lose any e-mails at first..
After your configuration is checked and correct. Change to quarentine or reject.

And you should get the e-mails.
Thiago 

Em seg, 17 de dez de 2018 às 14:41, Thiago Souza <thiago@xxxxxxxxx> escreveu:
Angelo,

It's DMARC that report failures. Usually daily.

The record for your domain is: 

                            Type: TXT

                            Host/Name: _DMARC.mta5.uits.uconn.edu

                            Value: v=DMARC1; p=none; rua=mailto:3bc67bfe@xxxxxxxxxxxxxxxxxxxxxxxxxx; ruf=mailto:3bc67bfe@xxxxxxxxxxxxxxxxxxxxxxxxxx; fo=1

You should be getting e-mails at: 
3bc67bfe@xxxxxxxxxxxxxxxxxxxxxxxxxx and not 
dkim-errors@xxxxxxxxxxxxxxxxxxx.

Thiago

Em seg, 17 de dez de 2018 às 14:32, Fazzina, Angelo <angelo.fazzina@xxxxxxxxx> escreveu:

Please ignore if I posted in the wrong mailing list as I am have trouble find one for DKIM that is active.

Hi, I am trying to test my TXT records for the ability to report failures. Talking about RFC 6651

These are my records

dkim1._domainkey.mta5.uits.uconn.edu    text = "v=DKIM1\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/YIuJIABa9M7Ox5AXs6CP6z26d/i9JDrHW58YU/OzfsEr6yADboIOydCaiiVaNuwtkbx
catzd6/iutxWbAiY51rRAvVdBs2YIoGO6Glzeev66ft8IfMnHgxND438KIsdOjUmJZuglFJUWGzCYDSC1eq/zqDVncFwTxWkKW/qtxQIDAQAB"

_report._domainkey.mta5.uits.uconn.edu  text = "ra=dkim-errors\; rp=100\; rr=all"

Here is a test email sig header
v=1; a=rsa-sha256; c=relaxed/simple; d=mta5.uits.uconn.edu; s=dkim1; t=1544820643; r=y; bh=9ZoLOUiYT9ubu7ykLiU305ZLqHeoTNV83po4QgGRepU=; h=To:From:Subject:Date:From; b=uPOMfVq7Ilr0/e2GEwEIiRotuX1gacod2Tmk7c1lfcYUpNTUznjUXPyNidTlbhrLA
 ylDHc1xE1P/B1NBo0awxBN4Qbwjz8UWUC1vQpQsrenWnhr+Rp46g7KKqWWZ2Sjw0O0 0RV2EF9aD1UP5bd7qLtuQHQ9gye5cVCBv6uVdM7g=

Here is a test email result header
spf=none (sender IP is 137.99.25.249) smtp.mailfrom=appmail.uconn.edu; uconn.mail.onmicrosoft.com; dkim=fail (invalid public key) header.d=mta5.uits.uconn.edu;uconn.mail.onmicrosoft.com; dmarc=none action=""
 header.from=appmail.uconn.edu;compauth=pass reason=105

So I can simulate a failure, but cannot seem to get a report emailed to
dkim-errors@xxxxxxxxxxxxxxxxxxx ?

I made sure account exists on server:
[root@mta5 home]# ls -l /home/|grep dkim
drwx------. 2 dkim-errors       dkim-errors         78 Dec 10 16:21 dkim-errors

How often are the failure reports generated ? did not see that mentioned in the RFC’s ?

Does anyone see anything obvious that I am doing wrong ?
Thank you.

-ANGELO FAZZINA

ITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail

angelo@xxxxxxxxx
University of Connecticut,  ITS, SSG, Server Systems
860-486-9075