Applies to:
- Webuzo 2.3.4
- Centos 6.5 64bit
- Exim 4.72
- A dedicated server having its own IP
(*) It should work for different setups with minor adjustments.


Detail: I couldn't find a guide detailing steps to do it and had to spend 2-3 hours on how to do it. I didn't even know what "DKIM" or "SPF" meant before my email started being rejected by GMail and I stopped receiving emails from my WordPress without me changing anything.

Please note that I'm a novice in linux and that there may surely be an easier method to do this. I'm sharing as I really like Webuzo and I believe it may help others.


Steps:

1) Start an ssh session and go to /etc/exim/
(*) It's not required, but it'll help in the next few steps.

2) Generate a private and public key to sign your messages with openssl:
#openssl genrsa -out dkim.private.key 1024
(*) It works well if you get "Returned error code 0" and you see a file named "dkim.private.key" in that directory.

3) Extract the public key from the private key
#openssl rsa -in dkim.private.key -out dkim.public.key -pubout -outform PEM
(*) A new file named "dkim.private.key" will be created in this directory.

4) Open exim.conf to modify it:
Replace:
remote_smtp:
    driver = smtp
With:
remote_smtp:
    driver = smtp
    dkim_domain = ${lc:${domain:$h_from:}}
    dkim_selector = x
    dkim_private_key = /etc/exim/dkim.private.key
    dkim_canon = relaxed
(*) It allows all domains linked to this server to use DKIM and use the private key you just created. if you opt to change "dkim_selector" it'll need to be adjusted in later steps.

5) Restart Exim
(*) I go to "services" in Webuzo, but there are other options.

6) Adjust your DNS settings

6.1) If you don't have a mx record, create one:
Priority: 1
Host: @
Points to: @

6.2) Create a TXT setting specifying your SPF settings:
Host: @
txt value: v=spf1 a mx ip4:999.999.9.99 ip6:9999:9999:99:3a32:: ~all
(*) Adjust to your IPs. It's the only thing required for SPF to work.

6.3) Create a TXT setting specifying your DKIM:
Host: x._domainkey
txt value: v=DKIM1; p=<your public key>
(*) If you changed "dkim_selector" under "Host", "x" will need to be adjusted accordingly.


How to test:
- https://www.dnswatch.info/dkim/create-dns-record
- https://www.mail-tester.com/spf-dkim-check

Then: send an email from this address to an external email and check if both SPF and DKIM are specified correctly in the header. You should see "spf=pass" and "dkim=pass" as well as other configurations depending on which email provider you send to. Hotmail and GMail are both good to confirm these settings.

I forgot step 7:

7) In Webuzo, go to "Advance DNS Setting" and for the domain you
wish to send email from add a txt record exactly as you did in step 6.3.

Hi awan89,
yes your emails goes into SPAM for SPF and DKIM also please use this link to test:
https://www.mail-tester.com/

IT'S easy and safe, just send an email from your domain email address to the temp address generated in this page than press the button in the webpage and check issues.

From your domain record I can see you are using DigitalOcean so your DNS record will be not readed in Webuzo.

You have to work in DNS on the DigitalOcean.
I tried to to the test at this page:

https://www.mail-tester.com/spf-dkim-check

by putting your domain baliavata.com and seems to be good.
Let me check now here:
http://www.kitterman.com/spf/validate.html

Your SPF pass is OK so please do the test here:
https://www.mail-tester.com/

I cannot do this for you and let me know your point if is 5/6 or 10/10
you will see all errors and what to fix.

Emails go also into Gmail antispam if you have only redirection but not account email created in Webuzo, maybe.

Let me know

Hello~

I used to have 10/10 but today I checked it and now it is 2/10

strange thing i see now is
1. Bounce Address is "sean@mydomain"  not "sean@mydomain.ext"
2. I have working SPF records and has passed on SPFtest site but I still get
You do not have a SPF record, please add the following one to your domain "mydomain"  <=== once again, it is "mydomain.ext" NOT "mydomain"

I think bounce back address setting is wrong somewhere wihtin Exim in centos webuzo? I dont know!
Damn this bug!! how can I fix this issue? :(

Usually if you are using Webuzo DNS when you add a domain (a new domain into Webuzo) there are the relative check boxed for set DKIM and SPF... this generate all necessary records.

I can suggest to remove the domain where you have the issue than put back again by checking the relative boxes but I have also to understand if you are using Webuzo DNS or external DNS... so again maybe is better chatting but after three hours because right now I AM busy

Hey! always thank you for your nice support.
I got it fixed and now 7/10 but it says

"You may want to publish a DNS record (A type) for the hostname xxxxxxxx or use a different hostname in your mail software."  -3 points.

What can I do for this error?

I discovered today that removing a domain will erase all email account associated. This was not working on this way in the past but since Webuzo has introduced the edit pach button near domain name they seems have insert that so I AM asking... if an user had already added a domain and have set many different email address how can them add SPF and DKIM without removing the domain and loose all emails?

This questions will be leaved to the Webuzo Team so hope my suggestion to remove the domain has not caused issue to you... I was unaware about this new edit from the Webuzo Team.



Seems your DNS may be not correct.
if you are using mail.domain.ext as email hostname in the email software client you need have an MX record or maybe you are using wrong settings in your email client... difficoult to say from here as I AM not in your PC and in your DNS and domain.

I AM happy to read that you are solving, step by step

seandex, help you on this is not so simple that I made a post here and you resolve.

The first test you need is download Thunderbird, configure your email than try again the test.
What settings are you using for configure thunderbird? What hostname are you using?

After I need see your DNS for understand how you have configured the records.
You can do a MX test of your record here:
https://mxtoolbox.com/

7 on 10 seems to be a good score. To have 10/10 you may need other work but is hard to help you in a forum

Hey! I got it working! 10/10



1. I changed /etc/hostname to mydomain.ext

2. I see there are 2 domains in /etc/hosts (mydomain.ext & mydomain), I just removed one (without .ext) and now i'm 10/10

Thank you peopleinside all of your tips helped resolving this disaster!

How can i find public key..
Please give me instruction.

When i type /etc/exim/dkim.public.key
Give an error access denied

Dkim not added in my dns zone record..
Only dmarc and spf record added