Setup DKIM with Exchange 2013/2016 Inhouse Server

[akpeelo]

@dbeato do you mean perform nslookup on the selector? NB: if i use online tools such as https://dmarcian.com to check the record, it fails automatically. but if i enter the selector i used in the DKIM software on my server, it passes the check in the online tool.

[akpeelo]

@akpeelo Please can someone help out?

[VoIP_n00b]

@akpeelo https://github.com/Pro/dkim-exchange/issues

[dbeato]

@akpeelo said in Setup DKIM with Exchange 2013/2016 Inhouse Server:

@akpeelo Please can someone help out?

Check this
https://github.com/Pro/dkim-exchange/issues/342

Also can you actually show your error, it is kind of hard to help without seeing what you see?

[akpeelo]

@dbeato .

[dbeato]

@akpeelo What is the DNS record that you added for adraghana.org?

[akpeelo]

@dbeato i added a TXT record and in the txt record, i added the Suggested Name as the host=20211509._domainkey and then added the Suggested DNS record =v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjddh3bmEvLbFI6cp60ZTEQJo4et80bPMhJ1OV5mVSOJl8w2hQL8EBzKISDNDxk9S6e7AiVTNNeYDu6mnxpacvlfsBEb5Pg1ZHqCiojf01XS4hbgvDLeHxsX2L11cYiYICQUQtVIzY0NHKZ2wN8bo2DkP+U10rb+KCTOeVi1jkeQHi+X5jp8NbiS/o4N0IFAzX7RP055oTvq8pBPtFI63IehSOsFndj3Cq6jBl0Oqb3R8lrKtih4tpK64HZwHTJWOR642MYVS4tiP5uAQTtaVQsnK81vW4lVGJDeLjiqLJI1B/m1mLatyJTM/FvlDCq1J2Y39Gv11uJz2Di0WsFH9xwIDAQAB as the value.

[dbeato]

@akpeelo said in Setup DKIM with Exchange 2013/2016 Inhouse Server:

@dbeato i added a TXT record and in the txt record, i added the Suggested Name as the host=20211509._domainkey and then added the Suggested DNS record =v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjddh3bmEvLbFI6cp60ZTEQJo4et80bPMhJ1OV5mVSOJl8w2hQL8EBzKISDNDxk9S6e7AiVTNNeYDu6mnxpacvlfsBEb5Pg1ZHqCiojf01XS4hbgvDLeHxsX2L11cYiYICQUQtVIzY0NHKZ2wN8bo2DkP+U10rb+KCTOeVi1jkeQHi+X5jp8NbiS/o4N0IFAzX7RP055oTvq8pBPtFI63IehSOsFndj3Cq6jBl0Oqb3R8lrKtih4tpK64HZwHTJWOR642MYVS4tiP5uAQTtaVQsnK81vW4lVGJDeLjiqLJI1B/m1mLatyJTM/FvlDCq1J2Y39Gv11uJz2Di0WsFH9xwIDAQAB as the value.

It is correct as below

So basically the issues is on the DKIM application but your messages are signed properly.

[akpeelo]

@dbeato so what should my next step be?

[Teece]

@dbeato step 4 is wrong. The DKIM signer needs to be at the BOTTOM of this list, so it runs last. Otherwise, other transport agents may modify the message, which would render the signatures generated by the signer invalid.

[dbeato]

@teece I haven't seen that happened ever, no other transport rules modified the DKIM at all.