[SOLVED]DKIM not valid for IPv6 as permitted sender

[newtron]

I had a problem with DKIM in Debian 8.2 server (famous Kimsufi, omg...), well...

If i sent an email to any gmail account he goes to spam folder... i check the headers email and we can see that:

Code: Select all

Received-SPF: pass (google.com: domain of ***@***.com designates ****:****:*:****::1 as permitted sender) client-ip=****:****:*:****::1;

Google marks the email as "permitted" but, he goes to SPAM folder anyway. But... check that! Hes seeing the IPv6 from my server!

Ok, we have a EXIM problem with IPv6 (probably DKIM key not valid for IPv6), EXIM and default config installs with IPv6 enabled as default so, we have to disable it.

1º Edit /etc/exim4/update-exim4.conf.conf

Change

Code: Select all

dc_local_interfaces='127.0.0.1; ::1'

to

Code: Select all

dc_local_interfaces='127.0.0.1'

2º Add "disable_ipv6=true" to /etc/exim4/update-exim4.conf.conf

Like this:

Code: Select all

SPAMASSASSIN = yes
SPAM_SCORE = 50
CLAMD =  yes
disable_ipv6=true

Now restart Exim and Bindwith with terminal (or in VestaCP Panel) and now our emails dont go to SPAM folder :D

Code: Select all

/etc/init.d/exim4 restart
/etc/init.d/bind9 restart

P.D. I didnt know really if its DKIM or IPv6 problem but.. this will solve the Google's "SPAM" firewall

[tjebbeke]

add your ipv6 address to your spf record

[newtron]

add your ipv6 address to your spf record

Without ipv6 address in spf record thats the gmail rensponse:

Code: Select all

Received-SPF: softfail (google.com: domain of transitioning ***@***.com does not designate ****:****:*:****::1 as permitted sender) client-ip=****:****:*:****::1;

The difference??? "designate" & "does not designate", but if you add ipv6 addres gmail is still moving the mail to SPAM folder...

[Rick74]

Just noting, that under Ubuntu 15, the second file to be changed in order to disable ip6, is NOT

Code: Select all

/etc/exim4/update-exim4.conf.conf

But:

Code: Select all

/etc/exim4/exim4.conf.template

I was making these changes, as I am trying to implement DKIM /DMARC files. Not finished yet.
Let me know if your original post is being update, in that case I will delete this update.