Does anyone understand DKIM?

[Pens]

I have enabled DKIM via DirectAdmin and am getting inconsistent results.
It shows under the domain DNS records tab in DirectAdmin.
I have not added it to the DNS records on my host

Powermarc.com produces

Domain name edited after the test.


Google/Yahoo/Mail.com send me reports saying

</policy_published>
<record>
<row>
<source_ip>107.191.xx.xx</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>xxxxxxxxxxclub.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>xxxxxxxxxxxclub.com</domain>
<result>pass</result>
<selector>x</selector>
</dkim>
<spf>
<domain>xxxxxxxxxxxxxclub.com</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
</feedback>

The DKIM checker in Thunderbird says



Does anyone have any idea what's going on?

 

[Richard G]

Does anyone have any idea what's going on?

I think this:

I have not added it to the DNS records on my host

If you don't run your own nameservers on your server, but are using external DNS than you must copy SPF and DKIM records to your external DNS (same for DMARC if present).
However, if Google can find your DKIM records your probably have that correct already.

There are various checkers you can use like the one from dmarcadvisor or for example mailtester if you want. I would trust those (and Google) more than an e-mail client addon if that is the only one giving a differt outcome.

You can also go to mail-tester and test there. You should get a 10/10 if all is correct.

 

[Pens]

Thanks for your help,

I have sent two messages from different domains via Mail-tester, one had a (near) perfect score, one -1 because no DKIM.

As far as I can see both have DKIM installed on both the DirectAdmin DNS and the host DNS.

I have just had a report from mail.com with a fail on DKIM, I guess my messing has caused that.

 

[Richard G]

I have sent two messages from different domains via Mail-tester, one had a (near) perfect score, one -1 because no DKIM.

So one should have DKIM while mail-tester did not see it while both have them configured the same. I hope you waited long enough for them to propagate. Should be quite quick normally.
The other was near perfect? I wonder what that "near" is and why it's not full.

If you don't want to share the domains in public, you could send them to me by pm and I have a look if I can find something.