DKIM check: permerror; How to set up DKIM properly?

[kkarsten62]

Hello,

I am quite new with administration of my server and this is my first post in this forum. I am owning a server at hosting provider "OwnCube" mainly to run OwnCloud and my E-Mail accounts.
My problem is that Google is rejecting my E-Mails sending to [email protected]. After 72 hrs I get the following return messages:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

[EMAIL][email protected][/EMAIL]
  host alt4.gmail-smtp-in.l.google.com [173.194.72.27]
  SMTP error from remote mail server after end of data:
  421-4.7.0 [136.243.232.70  15] Our system has detected that this message is
  421-4.7.0 suspicious due to the very low reputation of the sending IP address.
  421-4.7.0 To protect our users from spam, mail sent from your IP address has
  421-4.7.0 been temporarily rate limited. Please visit
  421 4.7.0 [URL='https://support.google.com/mail/answer/188131']Why has Gmail blocked my messages? - Gmail Help[/URL] for more information. g9si916162oew.9 - gsmtp:  retry timeout exceeded[/I]

I already addressed this topic several times to the support team of OwnCube. They are saying "All is fine at OwnCube side ... please address your problem to Google ..." So I am a bit frustrated and will start now helping myself.

I checked DKIM settings in cPanel: DKIM and SPF are both enabled but there is a warning, saying:
Warning: cPanel is unable to verify that this server is an authoritative nameserver for “example.de”.

Supporters from OwnCube stating that this is normal and can be ignored.

DKIM String in cPanel is:

default._domainkey IN TXT "v=DKIM1; k=rsa; p=MIIB ... AQAB\;

I sent a test E-Mail to "[email protected]".

I am worried about the DKIM permerror:

==========================================================
Summary of Results
==========================================================
SPF check:  neutral
DomainKeys check:  neutral
DKIM check:  permerror
Sender-ID check:  neutral
SpamAssassin check: ham

...
----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:  permerror (no usable key records)
...

Any help for a newbie is really appreciated. Thanks.

Karl ...

 

[Ameya Barwe]

It looks like your server's IP address is blacklisted at the Google end due to Spamming reason, I might recommend you to check status of IP address at this link :- Email Blacklist Check - See if your server is blacklisted

Also, this document outlines some of the best practices that you can follow to avoid email abuse on your cPanel & WHM server.

How to Prevent Email Abuse - cPanel Knowledge Base - cPanel Documentation

 

[cPanelMichael]

Warning: cPanel is unable to verify that this server is an authoritative nameserver for “example.de”.

Hello,

Is the DNS for this domain name handled on a remote name server? If so, check to ensure the DKIM TXT record was properly added in that remote DNS provider's DNS administrative interface, as those records are not automatically synced unless you have configured a DNS cluster or unless your provider is using a special configuration.

Thank you.

 

[kkarsten62]

Hello,

Many thanks for your replies.

In the meantime I helped myself. The problem was that the given cPanel DKIM string is wrong.

According to the forum discussion How to Enter DKIM record into DNS Zone I copy&paste the given DKIM in gedit text editor, delete some characters (the last 2 ones, space and " in the middle) by checking with DKIM Core Tools and provided the modified DKIM key to my registrar to include it in my DNS Zone. Now all seems to be fine, cPanel warning message disappears and all checking tools reports "passed" or "success".

kkarsten62

 

[cPanelMichael]

Hello,

I'm happy to see the issue is now resolved. Thank you for updating us with the outcome.