我正在尝试为我的服务器设置 DKIM，但 DNS 似乎存在一些问题。我使用 Windows 服务器和 Plesk 进行管理，我的邮件服务器是 MailEnable 标准，对于我的签名，我使用 DkeyEvent。我的电子邮件已签名，可以在 port25.com 检查电子邮件中看到，但当他们尝试检查我的 DNS 以查找 TXT 密钥时，却找不到它们。
这是我尝试 port25.com 检查实用程序时得到的结果。
This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com. The service allows email senders to perform
a simple check of various sender authentication mechanisms. It is provided
free of charge, in the hope that it is useful to the email community. While
it is not officially supported, we welcome any feedback you may have at
<[email protected]>.
Thank you for using the verifier,
The Port25 Solutions, Inc. team
==========================================================
Summary of Results
==========================================================
SPF check: neutral
DomainKeys check: permerror
DKIM check: permerror
Sender-ID check: neutral
SpamAssassin check: ham
==========================================================
Details:
==========================================================
HELO hostname: mail.metodovitalus.com
Source IP: 81.169.243.142
mail-from: [email protected]
----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: neutral (SPF-Result: None)
ID(s) verified: [email protected]
DNS record(s):
metodovitalus.com. SPF (no records)
metodovitalus.com. TXT (no records)
----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: permerror (DK_STAT_NOKEY: No public key available (permanent failure)
ID(s) verified: )
DNS record(s):
soporte._domainkey.metodovitalus.com. TXT (no records)
----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: permerror (no usable key records)
ID(s) verified:
Canonicalized Headers:
domainkey-signature:a=rsa-sha1;'20'q=dns;'20's=soporte;'20'd=metodovitalus.com;'20'c=nofws;'20'h=Received:Date:Message-ID:From:To:Subject:User-Agent:Content-Ty'20'pe:MIME-Version:Content-Disposition;'20'b=rnVOhfBdBkoGyx9jiBO5ZtL+IrQWPm+rXr'20'BRg+9LQUeExIQFDycKx8PWwSuBaWw+8VTqNGx+G0mCJnHaqoBV3Ztaoc+2SP5DLbWX4+a+01M'20'tbSzEyEnTnRDXru2lt3ex;'0D''0A'
date:Fri,'20'04'20'Dec'20'2015'20'13:09:02'20'+0000'0D''0A'
message-id:<20151204130902.Horde.0-5NDjKuirUbm3QYBIH_s5w@webmail.metodovitalus.com>'0D''0A'
from:[email protected]'0D''0A'
to:[email protected]'0D''0A'
subject:tes'0D''0A'
user-agent:Horde'20'Application'20'Framework'20'5'0D''0A'
content-type:text/plain;'20'charset=utf-8;'20'format=flowed;'20'DelSp=Yes'0D''0A'
mime-version:1.0'0D''0A'
content-disposition:inline'0D''0A'
dkim-signature:v=1;'20't=1449234543;'20'a=rsa-sha1;'20'q=dns/txt;'20's=soporte;'20'd=metodovitalus.com;'20'[email protected];'20'c=relaxed/simple;'20'bh=Rn'20'cHNkkRgpHaoq2sZDSLD5ey4Pc=;'20'h=DomainKey-Signature:Date:Message-ID:From:'20'To:Subject:User-Agent:Content-Type:MIME-Version:Content-Disposition;'20'b=
Canonicalized Body:
'0D''0A'
test'0D''0A'
DNS record(s):
soporte._domainkey.metodovitalus.com. TXT (no records)
NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.
----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result: neutral (SPF-Result: None)
ID(s) verified: [email protected]
DNS record(s):
metodovitalus.com. SPF (no records)
metodovitalus.com. TXT (no records)
----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.4.0 (2014-02-07)
Result: ham (-1.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
==========================================================
Explanation of the possible results (from RFC 5451)
==========================================================
SPF and Sender-ID Results
=========================
"none"
No policy records were published at the sender's DNS domain.
"neutral"
The sender's ADMD has asserted that it cannot or does not
want to assert whether or not the sending IP address is authorized
to send mail using the sender's DNS domain.
"pass"
The client is authorized by the sender's ADMD to inject or
relay mail on behalf of the sender's DNS domain.
"policy"
The client is authorized to inject or relay mail on behalf
of the sender's DNS domain according to the authentication
method's algorithm, but local policy dictates that the result is
unacceptable.
"fail"
This client is explicitly not authorized to inject or
relay mail using the sender's DNS domain.
"softfail"
The sender's ADMD believes the client was not authorized
to inject or relay mail using the sender's DNS domain, but is
unwilling to make a strong assertion to that effect.
"temperror"
The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability to
retrieve a policy record from DNS. A later attempt may produce a
final result.
"permerror"
The message could not be verified due to some error that
is unrecoverable, such as a required header field being absent or
a syntax error in a retrieved DNS TXT record. A later attempt is
unlikely to produce a final result.
DKIM and DomainKeys Results
===========================
"none"
The message was not signed.
"pass"
The message was signed, the signature or signatures were
acceptable to the verifier, and the signature(s) passed
verification tests.
"fail"
The message was signed and the signature or signatures were
acceptable to the verifier, but they failed the verification
test(s).
"policy"
The message was signed but the signature or signatures were
not acceptable to the verifier.
"neutral"
The message was signed but the signature or signatures
contained syntax errors or were not otherwise able to be
processed. This result SHOULD also be used for other
failures not covered elsewhere in this list.
"temperror"
The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability
to retrieve a public key. A later attempt may produce a
final result.
"permerror"
The message could not be verified due to some error that
is unrecoverable, such as a required header field being
absent. A later attempt is unlikely to produce a final result.
==========================================================
Original Email
==========================================================
Return-Path: <[email protected]>
Received: from mail.metodovitalus.com (81.169.243.142) by verifier.port25.com id hc687420i3gj for <[email protected]>; Fri, 4 Dec 2015 08:09:06 -0500 (envelope-from <[email protected]>)
Authentication-Results: verifier.port25.com; spf=neutral (SPF-Result: None) [email protected]
Authentication-Results: verifier.port25.com; domainkeys=permerror (DK_STAT_NOKEY: No public key available (permanent failure)) [email protected]
Authentication-Results: verifier.port25.com; dkim=permerror (no usable key records)
Authentication-Results: verifier.port25.com; sender-id=neutral (SPF-Result: None) [email protected]
DKIM-Signature: v=1; t=1449234543; a=rsa-sha1; q=dns/txt; s=soporte;
d=metodovitalus.com; [email protected]; c=relaxed/simple; bh=Rn
cHNkkRgpHaoq2sZDSLD5ey4Pc=; h=DomainKey-Signature:Date:Message-ID:From:
To:Subject:User-Agent:Content-Type:MIME-Version:Content-Disposition;
b=PDElxguhKpGUcDjKe7mlYvugpQj33fbafWIp3/VRHzZRG4SoqJK7RqRh/2CVLyyVtLL88sY
ZvA/ZcI9FWfWs3eGWPgWlf0sQsX+jXh9OtADsMzF6JI+3/d/x75wIYRYr
DomainKey-Signature: a=rsa-sha1; q=dns; s=soporte; d=metodovitalus.com;
c=nofws; h=Received:Date:Message-ID:From:To:Subject:User-Agent:Content-Ty
pe:MIME-Version:Content-Disposition; b=rnVOhfBdBkoGyx9jiBO5ZtL+IrQWPm+rXr
BRg+9LQUeExIQFDycKx8PWwSuBaWw+8VTqNGx+G0mCJnHaqoBV3Ztaoc+2SP5DLbWX4+a+01M
tbSzEyEnTnRDXru2lt3ex;
Received: from localhost ([127.0.0.1]) by home with MailEnable ESMTP; Fri, 4 Dec 2015 14:09:02 +0100
Received: from 84.127.223.103 ([84.127.223.103]) by
webmail.metodovitalus.com (Horde Framework) with HTTP; Fri, 04 Dec 2015
13:09:02 +0000
Date: Fri, 04 Dec 2015 13:09:02 +0000
Message-ID: <20151204130902.Horde.0-5NDjKuirUbm3QYBIH_s5w@webmail.metodovitalus.com>
From: [email protected]
To: [email protected]
Subject: tes
User-Agent: Horde Application Framework 5
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
test
因此，如果使用 dig 来检查结果，我们会得到这样的结果，这样我就可以检查我的 dns 条目，并且我们可以看到域密钥：
$ dig soporte._domainkey.metodovitalus.com TXT @ns1.metodovitalus.com
; <<>> DiG 9.8.5-P1 <<>> soporte._domainkey.metodovitalus.com TXT @ns1.metodovitalus.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33529
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;soporte._domainkey.metodovitalus.com. IN TXT
;; ANSWER SECTION:
soporte._domainkey.metodovitalus.com. 86400 IN TXT "p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALZZsTIN8w5aUNPveTYvdSOeMOmcS93tMnSfangO4Dgv4PiTW0Qyq+x/NocNIukhElVbCsMeWTFPXDnizSkUD//2FG7S7RvPN97Fcy6eAAtxNtTXvvIbFDY+Ieizlnf0RwIDAQAB"
;; Query time: 66 msec
;; SERVER: 81.169.243.142#53(81.169.243.142)
;; WHEN: Fri Dec 04 14:40:03 CET 2015
;; MSG SIZE rcvd: 237
但是当我执行这个时，当我尝试以这种方式检查域密钥时，我收到以下消息：
$ dig soporte_domainkey.metodovitalus.com TXT
; <<>> DiG 9.8.5-P1 <<>> soporte_domainkey.metodovitalus.com TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39370
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;soporte_domainkey.metodovitalus.com. IN TXT
;; AUTHORITY SECTION:
metodovitalus.com. 1257 IN SOA ns.stratoserver.net. hostmaster.stratoserver.net. 2015111024 10000 3000 604800 1800
;; Query time: 37 msec
;; SERVER: 62.81.16.164#53(62.81.16.164)
;; WHEN: Fri Dec 04 14:37:37 CET 2015
;; MSG SIZE rcvd: 119
谢谢。
答案1
您的域名列出的名称服务器是
[me@risby financial]$ whois metodovitalus.com
[Querying whois.verisign-grs.com]
[Redirected to whois.cronon.net]
[Querying whois.cronon.net]
[whois.cronon.net]
...
Name Server: ns.stratoserver.net
Name Server: ns2.stratoserver.net
以下两个都不是您在上面查询的名称服务器：
[me@risby financial]$ dig ns.stratoserver.net
;; ANSWER SECTION:
ns.stratoserver.net. 1746 IN A 81.169.163.40
[me@risby financial]$ dig ns2.stratoserver.net
;; ANSWER SECTION:
ns2.stratoserver.net. 1741 IN A 81.169.148.41
[me@risby financial]$ dig ns1.metodovitalus.com
;; ANSWER SECTION:
ns1.metodovitalus.com. 1732 IN A 81.169.243.142
所以在我看来，您是在错误的名称服务器上发布记录。通过您的注册商修复列出的服务器，或将您的区域放在列出的名称服务器上。