You'll need to add the DKIM selector (and key) Sophos generated for you
to your external DNS provider so that other receivers can resolve the
key, which enables them to validate messages signed by your email filter.
- Mark Alley
On 6/20/2023 11:53 AM, Salvatore Jr Walter P via mailop wrote:
OK, we are still having issues with this.
We are using Sophos as an email gateway.
They generated a DKIM record and are telling us we need to send that
to our domain registrar to add it to our DNS records?
Is this correct? I understood DKIM was server side only?
*From:* mailop <mailop-boun...@mailop.org> *On Behalf Of *Salvatore Jr
Walter P via mailop
*Sent:* Friday, June 16, 2023 2:06 PM
*To:* 'mailop@mailop.org' <mailop@mailop.org>
*Subject:* [EXT] - [mailop] Dkim fails, success on same email?
Getting reports back from several ISPs like the one below. It shows
dkim failing for the IP, but successful for the domain? The domain
“mail-dkim-us-west-2.prod.hydra.sophos.com” uses multiple IPs, On
sophospsmartbannerend
Getting reports back from several ISPs like the one below.
It shows dkim failing for the IP, but successful for the domain?
The domain “mail-dkim-us-west-2.prod.hydra.sophos.com” uses multiple IPs,
One of which is “198.154.181.72”. We do receive failures on all other
IPs as well.
Is this an actual issue or something we can ignore?
<record>
<row>
<source_ip>198.154.181.72</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>warwickri.gov</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>mail-dkim-us-west-2.prod.hydra.sophos.com</domain>
<selector>v1</selector>
<result>pass</result>
</dkim>
<spf>
<domain>warwickri.gov</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
