(Solved) 2 DKIM records for one domain

Discussion in 'ISPConfig 3 Priority Support' started by ganewbie, Oct 17, 2017.

  1. ganewbie

    ganewbie Member HowtoForge Supporter

    Hello,
    I have two different virtual servers as follows:
    VM1 hosts domainone.com IP: Y.Y.Y.Y
    VM2 hosts domaintwo.com IP: X.X.X.X
    each VM controlled by ISPCONFIG3 and I have DKIM working successful and pass all the test.
    The problem is I use Domaintwo to send emails for Domainone.
    What I find is Google is complaining that DKIM fails as follows:
    Code:
    <?xml version="1.0" encoding="UTF-8" ?>
    <feedback>
      <report_metadata>
        <org_name>google.com</org_name>
        <email>[email protected]</email>
        <extra_contact_info>https://support.google.com/a/answer/246</extra_contact_info>
        <report_id>57619555555</report_id>
        <date_range>
          <begin>15767868700</begin>
          <end>1576798699</end>
        </date_range>
      </report_metadata>
      <policy_published>
        <domain>domainone.com</domain>
        <adkim>s</adkim>
        <aspf>s</aspf>
        <p>quarantine</p>
        <sp>quarantine</sp>
        <pct>100</pct>
      </policy_published>
      <record>
        <row>
          <source_ip>X.X.X.X</source_ip>
          <count>18</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>fail</dkim>
            <spf>pass</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>domainone.com</header_from>
        </identifiers>
        <auth_results>
          <spf>
            <domain>domainone.com</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
      <record>
        <row>
          <source_ip>Y.Y.Y.Y</source_ip>
          <count>11</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>pass</dkim>
            <spf>pass</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>domainone.com</header_from>
        </identifiers>
        <auth_results>
          <dkim>
            <domain>domainone.com</domain>
            <result>pass</result>
            <selector>default</selector>
          </dkim>
          <spf>
            <domain>domainone.com</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
    </feedback>
    
    How to fix this issue?
    Thanks,
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    How does the email goes to google when you own the sending and receiving server? Normally an email would be delieverd directly between your servers, google will never see it. Are you forwarding the email to google somehow?
     
  3. ganewbie

    ganewbie Member HowtoForge Supporter

    Thanks Till for the quick response,
    I send from one server to Google but under the name of the other server, i guess that is why there are two SPF and two DKIM records.
    Google reports each set of records under the correct IP.
    I have added two domain in SPF and they are not complaining anymore but I don't know what to do with DKIM.
    Thanks,
     
  4. florian030

    florian030 Well-Known Member HowtoForge Supporter

    Every domain has one dkim-record. You can not create multiplie dkim-keys for the same domain.
     
  5. ganewbie

    ganewbie Member HowtoForge Supporter

    Thanks Florian,
    Does it mean there is no solution for this scenario.
    The interesting thing is that it is only google who is complaining but not anybody else.
    Thanks
     
  6. ganewbie

    ganewbie Member HowtoForge Supporter

    Last edited: Oct 18, 2017

Share This Page