OpenDkim Plugin RSA Key

  • I have some problem with gmail, practically every mail sent from the server using opendkim / spf in gitmaster imscp version is landing in spam folder.
    I have searched the web for info and I have found the following,


    Quote


    Messages with DKIM signatures use a key to sign messages. Messages signed with short keys can be easily spoofed (see http://www.kb.cert.org/vuls/id/268267), so a message signed with a short key is no longer an indication that the message is properly authenticated. To best protect our users, Gmail will begin treating emails signed with less than 1024-bit keys as unsigned, starting in January 2013. We highly recommend that all senders using short keys switch to RSA keys that are at least 1024-bits long.


    Source


    The question is, does the opendkim plugin generate 1024 bits long RSA key?


    Thank you for the answer.
    [hr]
    According to this,

    Quote


    DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; ....


    I guess is a 256 bit key. Too weak for today's standards. I guess this is the reason that gmail treat those email as spam.


    Is there a way to make it 1024 bit long? :idea:

    Edited once, last by Delta04 ().


  • The Plugin is using the default and that is 1024. Check here: http://www.opendkim.org/opendkim-genkey.8.html


    I use also the latest version of the OpenDKIM plugin and I don't have any problems sending mails to gmail.


  • Thanks for the answer. Last night I did some digging on the web and, indeed, the problem is not with the dkim or spf. Also the source of email says pass on those two,



    It must be something else.


    Hello ;


    You should also ensure that the IP which is used as source for the outbound mail match with our server hostname.


    IP -----> hostname
    hostname ---> IP

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • The hostname and reverse IP is OK, and to be sure, the domain that I use is the main domanin from where the e-mails are sent. There must be something else...


    A bit offtopic, there is a problem with the domain.tld/webmail redirect in the gitmaster version of 12 ian 2014. ;)


  • A bit offtopic, there is a problem with the domain.tld/webmail redirect in the gitmaster version of 12 ian 2014. ;)


    http://forum.i-mscp.net/thread-4625-post-19675.html#pid19675

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Re;


    See http://forum.i-mscp.net/thread-4625-post-19707.html#pid19707 for a hook file which allow to add those redirects.


    Thank you for using i-MSCP

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206