Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Chrysalis]

Its possible this might be an issue on my email server, but I had to whitelist the kitz sender, as the forgot password link was logging a dkim key error.  So if this could be checked it would be good, just in case there is a problem. 

[kitz]

This is what I get when I check in cpanel

Code: [Select]

Domain
kitz.co.uk
Mail HELO
s4055.lon1.stableserver.net
DKIM Valid

“DKIM” is properly configured for this domain.
Current “DKIM” (TXT) Record TXT

Code: [Select]

SPF Valid
“SPF” is properly configured for this domain.
“DMARC” is properly configured for this domain.
Current “DMARC” (TXT) Record TXT
“PTR” is properly configured for this domain.
Current “PTR” (PTR) Record PTR

[kitz]

Seems OK sending mail to a PN email and also a gmail address.
From the headers:
Plusnet mail says

Code: [Select]

Authentication-Results: mail.enmail.co;
dkim=pass header.d=kitz.co.uk header.s=default header.b=[removed];

google mail

Code: [Select]

ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@kitz.co.uk header.s=default header.b=[removed];
       spf=pass (google.com: domain of [removed]@kitz.co.uk designates 185.201.17.60 as permitted sender) smtp.mailfrom=[removed]@kitz.co.uk;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kitz.co.uk
 
The mailbox for the forum email address is unmonitored as its only used for SMF generated mail but I logged in and noticed there are 2 undeliverable mails to your domain.  They are the only 2 undeliverable emails that I could see - everything else for the past month or more was spam mail.

Code: [Select]

host mail.[chrys_email_removed].org [xx.xx.185.200]
    SMTP error from remote mail server after end of data:
    550 DKIM Rejected: signature_incorrect

Attached report from google mail

[Chrysalis]

If you think the problem is unique to me I will change to an gmail address, its fine.

Ok I changed to gmail and selected forgot password again, the email arrives, however the dkim fails on gmail, its fortunate they dont block it or put to spam because of it.

I will paste the headers here.

Authentication-Results: mx.google.com;
       dkim=fail header.i=[del]kitz.co.uk header.s=default header.b=QjBA55Xd;
       spf=pass (google.com: domain of [del]kitz.co.uk designates 185.201.17.75 as permitted sender) smtp.mailfrom=[del]]kitz.co.uk;

So maybe something is different on the outbound email configuration for when forgot password is clicked.

[kitz]

I perhaps need a bit more time to think on this- which I havent right now as I am dreadfully slow and not slept last night, but will look at the w/e again and play with a test account, but this is mental.  
The graphic report in my earlier post was gmail.
The emailfor PMs is fine.  PN mail says OK using PM notifications which use same server mail settings as password etc

Ive checked using the mxgoolbox website.
https://mxtoolbox.com/SuperTool.aspx#

Code: [Select]

dkim:forum.kitz.co.uk:default

DKIM Record Published DKIM Record found
Status Ok DKIM Syntax Check The record is valid
Status Ok DKIM Public Key Check Public key is present

---
ETA.  slightly edited your post to remove any @.  I know the address is out there, but data harvestrs still scan looking for new addresses to a add to their list
DMArc is something different... and on that particular note,  Im tired of scammers pretending to be ethical hackers. Some of whom turn out to be not so nice when they realise youre not going to pay up thousands of $ from a bounty pot that I dont have.  iirc it was Troy Hunt who warned a few years ago that chancers would  try jump on that band waggon and they have. :/

[Chrysalis]

Ok if I paste again in future, I will censor those parts.

[Derpy]

I am trying to get a test mail sent myself to have a look.

[Chrysalis]

I am trying to get a test mail sent myself to have a look.

Thanks for looking into it, if you click forgot password it wont reset it, unless you click on the link in the email. So it should be easy to test it.