<![CDATA[ElasticEmail dns record problem... i guess?]]>Hi everyone,

Can somebody point me into the right direction, to solve my last error i get when i check my mail-score at mail-tester.com.
The score gives me a big 10, so i should be happy with that, but....

When i look at the Dmarc-test details i discovered the line that says:
"mail-tester.com; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=example.com header.i=@example.com header.b=PbG0+owL; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=elasticemail.com header.i=@elasticemail.com header.b=WSscCazF; dkim-atps=neutral"

For dns setup i used the following records:

SPF: "v=spf1 a:my.example.com a mx include:_spf.elasticemail.com ~all" ( I edited this record)

DKIM: TXT record for api._domainkey.example.com with value: k=rsa;t=s;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbmGbQMzYeMvxwtNQoXN0waGYaciuKx8mtMh5czguT4EZlJXuCt6V+l56mmt3t68FEX5JJ0q4ijG71BGoFRkl87uJi7LrQt1ZZmZCvrEII0YO4mp8sDLXC8g1aUAoi8TJgxq2MJqCaMyj5kAm3Fdy2tzftPCV/lbdiJqmBnWKjtwIDAQAB

Tracking: CNAME record for tracking.example.com to api.elasticemail.com

Bounces: CNAME record for bounces.example.com to bounces.elasticemail.net

DMARC: TXT record for _dmarc with "v=DMARC1;p=none;rua=mailto:webmaster@domain.com;pct=100;ruf=mailto:webmaster@domain.com;fo=0:d:s;aspf=r;adkim=r;"

MX: MX record for my.example.com (this was already in place)

Where example.com is my actual domain, removed it for privacy reasons.

Do i overlook something or is it a dns-resolving problem somewhere, or maybe it's mail-tester.com that shows a problem that i don't have?
This thing keeps me busy now for days and normally i solve things on my own, but this time i can't 😕

]]>https://forum.cloudron.io/topic/4472/elasticemail-dns-record-problem-i-guessRSS for NodeWed, 15 Apr 2026 04:37:55 GMTMon, 15 Feb 2021 08:53:12 GMT60<![CDATA[Reply to ElasticEmail dns record problem... i guess? on Wed, 17 Feb 2021 12:16:08 GMT]]>@dantheman https://mxtoolbox.com/emailhealth is another good one.

]]>https://forum.cloudron.io/post/26019https://forum.cloudron.io/post/26019Wed, 17 Feb 2021 12:16:08 GMT<![CDATA[Reply to ElasticEmail dns record problem... i guess? on Wed, 17 Feb 2021 08:26:30 GMT]]>@girish @marcusquinn
Thanks a lot guys for the input. This is exactly why i just love Cloudron so much!! 👍 👍
Helpfull community and Staff, you guys helped me so much already, just by reading the forums and mostly finding my answers over there, normally... but this time i had to ask about this one, and the help again was there really quickly, really appreciate it!! 👍 👍

I'll wait for another week, to throw out another test @mail-tester.com.
In the meantime i also got some Dmarc_reports delivered to my mailbox and everything is evaluated with <check>passed<, so i also think it has to be some kind of bug at the mail-tester end.
I also keep an eye open on my Dmarc_reports in the meantime.....

]]>https://forum.cloudron.io/post/26009https://forum.cloudron.io/post/26009Wed, 17 Feb 2021 08:26:30 GMT<![CDATA[Reply to ElasticEmail dns record problem... i guess? on Tue, 16 Feb 2021 21:04:27 GMT]]>@dantheman Your second result atleast shows that the DKIM signing is working fine. Maybe try again with mail-tester in a week or so to check if they fixed some bug on their side?

]]>https://forum.cloudron.io/post/25992https://forum.cloudron.io/post/25992Tue, 16 Feb 2021 21:04:27 GMT<![CDATA[Reply to ElasticEmail dns record problem... i guess? on Mon, 15 Feb 2021 19:33:21 GMT]]>@dantheman Strange, sounds like you're doing all the right things.

I guess the real test is just straight-up real user delivery tests.

Maybe more relevant reading in this thread:

https://forum.cloudron.io/topic/2851/seeking-recommendations-based-on-experience-for-sendmail-relays/24?_=1613154358418

]]>https://forum.cloudron.io/post/25890https://forum.cloudron.io/post/25890Mon, 15 Feb 2021 19:33:21 GMT<![CDATA[Reply to ElasticEmail dns record problem... i guess? on Mon, 15 Feb 2021 16:44:36 GMT]]>@marcusquinn said in ElasticEmail dns record problem... i guess?:

"

Thanks for helping me out and sharing your config.. 👍👍

I did tried it the first time, wrapping the DKIM TXT with quotes .. but that doesn't seem to change it also...
I just rolled it back now just to be sure, so it's wrapped with double quotes again at this point.

I did another test at appmaildev.com to see what they are saying about my records...
funny 🙄
Because now the output of every record passed the test with a full green text "Passed" and no Fails at all...

this is the output of that test:
_dmarc.example.com: v=DMARC1;p=none;rua=mailto:webmaster@domain.com;pct=100;ruf=mailto:webmaster@domain.com;fo=0:d:s;aspf=r;adkim=r;
Received-SPF: pass (appmaildev.com: domain of my-name=example.com@bounces.example.com designates 54.36.22.222 as permitted sender) client-ip=54.36.22.222
Authentication-Results: appmaildev.com;
dkim=pass header.d=example.com;
spf=pass (appmaildev.com: domain of my-name=example.com@bounces.example.com designates 54.36.22.222 as permitted sender) client-ip=54.36.22.222;
dmarc=pass (adkim=r aspf=r p=none) header.from=example.com;

Where "example.com" is my actual domain redacted for privacy

SPF: Pass
DKIM: pass
DMARC: pass
DomainKey-Result: none (no signature)
If DKIM result is passed, you can ignore DomainKey result: none
Notice: DomainKey is obsoleted standard, the new standard is DKIM.

PTR: ExistsRecord
RBL: NotListed

]]>https://forum.cloudron.io/post/25880https://forum.cloudron.io/post/25880Mon, 15 Feb 2021 16:44:36 GMT<![CDATA[Reply to ElasticEmail dns record problem... i guess? on Mon, 15 Feb 2021 14:08:25 GMT]]>@dantheman Odd, if you've followed everything with EE instructions, it should all be good.

One caveat, don't use Cloudflare DNS proxy on the bounces and tracking CNAME records.

You could try wrapping the DKIM TXT value with quotes, so:

"k=rsa;t=s;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbmGbQMzYeMvxwtNQoXN0waGYaciuKx8mtMh5czguT4EZlJXuCt6V+l56mmt3t68FEX5JJ0q4ijG71BGoFRkl87uJi7LrQt1ZZmZCvrEII0YO4mp8sDLXC8g1aUAoi8TJgxq2MJqCaMyj5kAm3Fdy2tzftPCV/lbdiJqmBnWKjtwIDAQAB"

Here's my related working Cloudflare records on one domain using EE for reference:

feafa88e-94ac-4eec-8469-ebf210e72f15-image.png

292859e7-504b-499f-ab25-85f68adb05c6-image.png

2a9d2636-faa8-4f58-a5b5-e2bdc95a4584-image.png

]]>https://forum.cloudron.io/post/25873https://forum.cloudron.io/post/25873Mon, 15 Feb 2021 14:08:25 GMT