09-13-2023 01:29 PM
Hello,
I'm writing here because this is the only place I found in order to reach Cisco people.
I'm not a Cisco customer but just a postmaster of a small business trying to sending mail to domains managed by IronPort solution.
The issue refers to DKIM alignment : I receive DMARC reports from IronPort telling me the DKIM authentication is in permerror state. However, I have this issue only with IronPort managed domains : From others big email companies such as Google or Microsoft, there is no such issue.
The thing is that I can't have the detail of the permerror failure with the DMARC report. and since I'm not a customer I can't open a case.
So is it possible to reach somebody from Cisco IronPort in order to be able to have a deeper analysis of that issue ?
Thanks
BR,
P.
09-13-2023 01:39 PM
what you mean managed domains ? means is FQDN domains ? (you need to send full header of the error to review)
i would also suggest to check this document :
09-13-2023 01:51 PM
Hello,
I mean MX domain by managed domain.
The thing is that I am the postmaster of the sender domain which is not managed by IronPort. And it's complicated to get the headers from a recipient or contact the postmaster of the recipient domain that's why i'm trying here.
The only info I have is the DMARC report with the permerror status
Thanks
P.
09-13-2023 02:29 PM
you can check your email security at MXtoolbox.
https://mxtoolbox.com/SuperTool.aspx
And if you want, send me a PM and I'll give you my email to try to send to as we use Ironports to see the logs from this side if you want. It also doesn't surprise me the big companis don't do a lot of the security checks. you can even see googles SPF ends in ~all
google.com text =
"v=spf1 include:_spf.google.com ~all"
09-14-2023 11:27 AM
Hello Dusting,
Thanks for your interest and your help
I appreciate your help. I'll send you a PM in order to negotiate together how to do some tests
Thanks again
Regards,
P.
09-14-2023 02:26 PM
Hi again community,
Thanks to Dustin, we could identify that Ironport doesn't accept key > 2048 bits. With a new 2048 bits length key, everything is working now !
Thanks for everything !
Regards,
P.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide