Results 1 to 23 of 23
  1. #1
    Join Date
    Jan 2008
    Posts
    42

    * DKIM w/ cPanel/Exim Linux Server

    Does anyone know if it is possible to implement DKIM (DomainKeys Identified Mail) on a Linux server that uses cPanel/Exim? I am interested in getting this implemented but not sure how, or if it's even possible yet on my setup.

    Thank you.

  2. #2
    Join Date
    Apr 2005
    Location
    Cochin
    Posts
    2,446
    You may take a look at this

    http://wiki.exim.org/DomainKeys
    Sam
    Supportlobby.com - Expertise in Windows/Linux server support, IaaS and PaaS Management
    Spiralbean.com - Custom Software Development
    Email: exec @ activelobby.net | Skype: unni_active

  3. #3
    Join Date
    Jan 2008
    Posts
    42
    DKIM is not domainkeys... it's domainkeys identified mail.

  4. #4
    I am not sure about, what is DKIM, but as far as i know, only
    Yahoo and Gmail, are the two big guns, who successfully implemented the domain key things............

    I think, yahoo is supporting the qmail-domain key project also........
    Web Hosting Gurus

  5. #5
    Join Date
    Nov 2006
    Location
    Houston, TX
    Posts
    563
    Quote Originally Posted by apacheMan View Post
    Does anyone know if it is possible to implement DKIM (DomainKeys Identified Mail) on a Linux server that uses cPanel/Exim? I am interested in getting this implemented but not sure how, or if it's even possible yet on my setup.

    Thank you.
    cPanel/WHM does support Domain Keys. Individual users can enable this via their cPanel interface by clicking the "Email Authentication" icon in the Mail section. If you do not see this, ensure you are using the X3 theme and a recent build of cPanel/WHM.
    David Grega
    cPanel Technical Product Specialist

  6. #6

    Answer wanted

    Did anybody actually answer this question?

    Exim has DKIM in beta. Shouldn't cPanel have DKIM in their Edge branch?

  7. #7
    Join Date
    Jan 2006
    Location
    Roswell, GA
    Posts
    192
    I don't think cPanel has any DKIM functionality yet. I'm sure it will eventually though.

  8. #8
    Join Date
    Nov 2006
    Location
    Houston, TX
    Posts
    563
    Quote Originally Posted by mistaknly View Post
    Did anybody actually answer this question?

    Exim has DKIM in beta. Shouldn't cPanel have DKIM in their Edge branch?
    That is correct, the Exim employed in our latest EDGE builds does have DKIM support that is in beta.
    David Grega
    cPanel Technical Product Specialist

  9. #9
    Join Date
    Sep 2008
    Posts
    93
    HI,

    I have already enabled domain keys for my domain but whenever i email to any yahoo id in header it showing --->> " domainkeys=pass (ok); from=mydomain.com; dkim=neutral (no sig)"

    so please guide me how to enable --->> dkim=pass


    From :[email protected] Mon Mar 23 17:20:04 2009
    Return-Path: <[email protected]>
    Authentication-Results: mta135.mail.ac4.yahoo.com from=mydomain.com ; domainkeys=pass (ok); from=mydomain.com; dkim=neutral (no sig)
    Received: from 127.0.0.1 (EHLO croco1.mydomain.com ) (x.x.x.x) by mta135.mail.ac4.yahoo.com with SMTP; Mon, 23 Mar 2009 04:50:07 -0700
    DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=mydomain.com; h=Message-IDateubject:From:To:User-Agent:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:Importance; b=567890i6uvXmOB0hl0l2ivKrxWZltCybGUIoleUoVyjh9fzM+5x1xc4CMjEbfO/lydT0O/ZR1VVjRFoAyVw7mTYUIebKdOtrpc2VJb3oLmXs3gy3x5wiqSKPi5/Bt2X/ltqdfhPTe2;

    So please guide me and do needful to solve this issue ...

    Thanks in advance..

    p-root

  10. #10
    Join Date
    Apr 2009
    Location
    Kerrville, TX
    Posts
    45
    Quote Originally Posted by p-root View Post
    HI,

    I have already enabled domain keys for my domain but whenever i email to any yahoo id in header it showing --->> " domainkeys=pass (ok); from=mydomain.com; dkim=neutral (no sig)"

    so please guide me how to enable --->> dkim=pass


    From :[email protected] Mon Mar 23 17:20:04 2009
    Return-Path: <[email protected]>
    Authentication-Results: mta135.mail.ac4.yahoo.com from=mydomain.com ; domainkeys=pass (ok); from=mydomain.com; dkim=neutral (no sig)
    Received: from 127.0.0.1 (EHLO croco1.mydomain.com ) (x.x.x.x) by mta135.mail.ac4.yahoo.com with SMTP; Mon, 23 Mar 2009 04:50:07 -0700
    DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=mydomain.com; h=Message-IDateubject:From:To:User-Agent:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:Importance; b=567890i6uvXmOB0hl0l2ivKrxWZltCybGUIoleUoVyjh9fzM+5x1xc4CMjEbfO/lydT0O/ZR1VVjRFoAyVw7mTYUIebKdOtrpc2VJb3oLmXs3gy3x5wiqSKPi5/Bt2X/ltqdfhPTe2;

    So please guide me and do needful to solve this issue ...

    Thanks in advance..

    p-root
    This is correct, domain Keys are Different than DKIM, because DKIM actually signs the message, domain keys is nothing more than a different version of sender ID. Until recently Yahoo and Gmail didn't actually check for signatures as they supported the OLDER style (domain keys NOT to be confused with the newer DKIM)

    Once people start to understand the difference then I beleive that DKIM will have enough demand to have Cpanel get busy implementing it. As of late I do not beleive Cpanel support the DKIM signatures.
    █>>> MoonSoft Systems Dedicated Managed & Reseller Hosting
    █>> 3rd party scripting support
    █> Professional Hosting solutions for your business

  11. #11
    Join Date
    Mar 2007
    Posts
    83
    Will be nice to have DKIM support in CPanel/Exim... All emails sent to Yahoo arrive to spam folder. :-(

  12. #12
    Join Date
    Oct 2007
    Posts
    62
    other than domain keys, what cateria does HOTMAIL/YAHOO/GMAIL judge an e-mail as spam or not spam?

    Recently I find out that they do judge based on Ironport IP Reputation. My server sends a large momentum of legit e-mails time to time and my reputation goes from GOOD to NEUTRAL (all emails sent to gmail/hotmail are marked as spam/junk)

    I'm interested to know more about this..

  13. #13
    Join Date
    Oct 2005
    Posts
    289
    I have implemented outbound DKIM + DomainKeys using DKIMproxy http://dkimproxy.sourceforge.net/ which is basically a SMTP proxy that signs outgoing emails.

    Yahoo is a bit tricky. I have a site in development that is yet to launch a site. But my with development setup, emails even with DKIM + DomainKeys + SPF are being treated as spam. Others say a full-proof way is to have your IPs whitelisted. Others also said that the age of your domain is also a factor.

    Gmail is straightforward and accepts my emails (with DKIM + DomainKeys + SPF properly implemented.)

    =)
    Last edited by cygnusd; 05-25-2009 at 07:50 AM. Reason: fixed typo

  14. #14
    Join Date
    Apr 2009
    Location
    Kerrville, TX
    Posts
    45
    From what i have seen Yahoo, doesn't care about email spam scores etc.. they only care about volume, if you are a very low volume sender they generally let you through but after seeing more than 1000 a day from a server they greylist you and you end up in thier spam box, whitelisting is NOT a good idea because so many people use the DC's ip addresses and so you pay to whitelist an IP and then have to move you have to pay again for another IP!!

    The biggest problem is also that what you really need is IP's swiffed to you so the abuse and onew information lists YOUR organization, the only way to do that is through ARIN but they frown on provisioning IP's in less than a class C and it's expensive to boot.

    I am hoping that IPV6 will solve some of these issues once fully deployed, but in honesty I think it will just make it worse.
    █>>> MoonSoft Systems Dedicated Managed & Reseller Hosting
    █>> 3rd party scripting support
    █> Professional Hosting solutions for your business

  15. #15
    Join Date
    Jul 2007
    Posts
    2,050
    Prashant T.

    Don't run after Success. Run after Excellence and Success will soon follow.

  16. #16
    Join Date
    Mar 2007
    Posts
    83
    Quote Originally Posted by prashant1979 View Post
    DomainKeys is not the same as DKIM. They are different.

  17. #17
    Join Date
    Jul 2007
    Posts
    2,050
    Quote Originally Posted by moonwizard View Post
    DomainKeys is not the same as DKIM. They are different.
    What you say is right. Visit the following URL

    http://www.ferris.com/2008/03/12/dki...eys-confusion/

    He says better stick with DomainKeys for now.
    Prashant T.

    Don't run after Success. Run after Excellence and Success will soon follow.

  18. #18
    I am also having this exact problem with emails going to spam folders for Google and Yahoo.

    People really need to understand DomainKeys is not DKIM. I'm surprised so many can't make that distinction yet.

    I am eagerly awaiting cPanel to offer full support of DKIM.

  19. #19
    Join Date
    Apr 2009
    Location
    Kerrville, TX
    Posts
    45

    Sys admin wants Cpanel to clean up mail!

    The funny thing is that there are those that say Yahoo is not even checking signatures... I don't know how long ago that post was made but check again they are and so is gmail, in fact there is a ton of people now using DKIM and checking signatures.

    Cpanel needs to step up the mail.. 11.25 has brought out some GREAT new features for mail but has never really addressed the REAL issue

    you can't expect that ONE setting in tweak settings (max messages per hour to work on EVERY mail provider. FOr example..

    Yahoo no more than 1000/hour, after that expect ot see deferred messages. Other domains dont have a limitation and some have even lower. Also some will actually base it off of your FAIL rate. In other words your delivery rate is based on how many BAD yahoo address you attempt to mail to.

    Cpanel needs to install a config list of separate providers that let you limit per domain per IP

    so that you can actually specify that 1 server ip that sends to yahoo can only sendd 1000/hour, and if they see a message 420 deferred to actually DO SOMETHING ABOUT IT!!.. LIKE STOP SENDING MAIL AS FAST!

    These mail providers have been responding to this type of granularity for some time now and lots of other mail clients let you do these types of things. It's time for Cpanel to hire a mail expert who's also got some sys admin skills, so they can actually develop a platform for mail that will actually function on a shared server.

    There are so many Cpanel webservers out there they really could command some "change" in the mail world.... and stop being know for shotty mail security and the ability to spam through it.
    █>>> MoonSoft Systems Dedicated Managed & Reseller Hosting
    █>> 3rd party scripting support
    █> Professional Hosting solutions for your business

  20. #20
    Join Date
    Jun 2002
    Posts
    1,056
    I had also setup domainkeys under cpanel for one of my domains. But I get this message:
    Current Status: Status: Enabled, WARNING: DomainKeys cannot be used because this server is not a DNS server for mydomain.com

    Yes, this domain does not use the WHM nameserver, it uses enom's nameservers but I added the "default._domainkey" record generated by WHM to enom DNS.

    How can I check if DomainKey is enabled for domain?
    Founder of TradeHolding.com B2B Network and OneLoveNet.com Singles & Dating
    >> Business Blog
    >> Business Links Directory

  21. #21
    Join Date
    Jun 2002
    Posts
    1,056
    So, although that error is still there when I send an email I see this line on the header:
    DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=onelovenet.com;
    h=Received:MIME-Version:Content-Transfer-Encoding:Content-Type:X-Mailerate:From:Toubject:Message-Id;
    b=ZU60DHo8OzL/IWxg6zp4NdLhtE1QLyMk289X3VKvKgTpxh5wNr8+XDVxzPCTfaatD3HerpLHWlbUEV9DP4bZq022XxnGvkpU9wYo4PSoKKjcEKCbvHXDlw/YOvcSkikQ;

    But how can I validate that this signature is passed?

    I tried this tool and here it states that it is not passed:
    http://www.mailradar.com/domainkeys/

    Thank you.
    Founder of TradeHolding.com B2B Network and OneLoveNet.com Singles & Dating
    >> Business Blog
    >> Business Links Directory

  22. #22
    Join Date
    Apr 2009
    Posts
    839
    use this:

    http://www.brandonchecketts.com/emailtest.php

    BTW it is possible to use DKIM on a cPanel server, there is russian guide:

    http://www.hostinglife.org/cpanel/po...-v-cpanel.html

    Someone can probably translate it to english

  23. #23
    Join Date
    Jun 2002
    Posts
    1,056
    Thanks. DomainKeys works!
    Founder of TradeHolding.com B2B Network and OneLoveNet.com Singles & Dating
    >> Business Blog
    >> Business Links Directory

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •