[SOLVED] PMG DKIM

[treloskilo]

Hello
I have setup the DKIM in pmg. I have created a DKIM record using an online generator. In DNS settings in a TXT record i have created the DKIM record (public key) and also in private in pmg i have copied the private key. We have Ms Exchange 2016 and all emails use the PMG as gateway.
I sent many times email to google and shows DKIM FAIL and dkim=neutral (body hash did not verify) . The
SPF records and DMARC records are pass, only the DKIM according to google is wrong. The header section in google mail (i= d= s=) show the correct domain.When i use an online DKIM checker everything is correct. We have a Watchguard firewall and even though i disabled the headers section still google shows Fail. Is there anything else i should do to make it work?
Thank you

 

[Stoiko Ivanov]

We have a Watchguard firewall and even though i disabled the headers section still google shows Fail. Is there anything else i should do to make it work?

My guess is that the Watchdog firewall changes the mail after PMG sends it out (some of those add some kind of footer with the content 'Checked by $vendor')

try disabling any deep packet inspection/smtp inspection/application layer checks in the firewall

 

[treloskilo]

https://forum.proxmox.com/threads/pmg-dkim-config.90765/#post-462625

 

[Stoiko Ivanov]

sorry - for overlooking (especially after I read the thread you posted above)

Thanks for completing this thread here!

 

[treloskilo]

You are welcome.

 

[thanhtien19]

@treblio : only copy exist private to this file /etc/pmg/dkim/s1.private ? no need copy public key ? please help me how to resuse exist key