Plesk for Windows
Plesk for Linux
kb: how-to
ABT: Group B
Applicable to:
- Plesk for Linux
- Plesk for Windows
Question
How to enable DKIM (DomainKeys Identified Mail) spam protection in Plesk?
Answer
-
Go to Tools & Settings > Mail Server Settings > DKIM spam protection section.
-
Enable the Allow signing outgoing mail or/and Verify incoming mail (For Plesk on Linux only) and press the OK button:
-
Verify incoming mail (Plesk for Linux)
This option switches on DKIM checking for all incoming mail. All messages are checked, and if the check fails, are marked with a special header.
-
Allow signing outgoing mail
This option enables customers to switch on the DKIM signing of outgoing mail on a per-domain basis.
Warning: It does not automatically enable the signing of outgoing email messages. To use DKIM, users must switch it on for individual domains.
-
Comments
11 comments
Plesk 17.8 - 17.0 for Windows do not have the Verify incoming mail option...
I am not authorized to access the "How to enable DKIM signing for all domains on Plesk for Windows server?" page which is referenced in this article 3 times...
Hi @Andrey Zelenchuk,
You're right - Verify incoming mail option is available on Linux servers only.
Regarding the "How to enable DKIM signing for all domains on Plesk for Windows server?" article - I've fixed the access to it. Please check it.
Hi
I use MailEnable Standard 10.12 with Plesk 17.8.11, but there is no DKIM Span Protection Section in Plesk > Tools & Settings > Mail Server Settings
Should i do something to get that?
@Pieter van Kampen
Hi!
Please try the following:
1. Log into Plesk
2. Go to Tools & Settings > Server Components and click "Refresh".
If this does not help, please submit a ticket regarding this using these instructions.
DKIM: How to add extra signed headers?
According with RFC 8058 "Signaling One-Click Functionality for List Email Headers" (https://tools.ietf.org/html/rfc8058) in order to use the header "List-Unsubscribe" this must be included on "h" tag of DKIM sign, nowadays only "From:To:Subject;" are included on DKIM-Signature.
So, how can I add this extra header on the DKIM signature?
Hello, @Gonzalo Besoain
It is possible to modify the DKIM record in Plesk > Domains > example.com > DNS Settings
If you click on default._domainkey.example.com record you will be able to specify any tags including h= in the TXT record field.
Please mind that DKIM should be enabled globally for the whole server and for the domain example.com otherwise, this TXT record will not exist.
Hi @Nick Plekhov
I understand that on DKIM DNS record the tag "h" is used to indicate hash algorithm.
RFC 8058 refers to add the "h" tag on the DKIM-Signature that is generated for each email sent.. by Plesk postfix in my case.
For example:
Hello Gonzalo Besoain,
Thank you for clarification.
Currently, Plesk does not provide an option to tune "DKIM-Signature" header.
Please submit a feature suggestion on our Plesk UserVoice portal and it will be considered for implementation in future releases.
Is there any way to make it enabled by default for individual domains?
Hello @Kea,
It is not possible to set DKIM enabled by default for the specific domain.
After enabling the DKIM in Tools & Settings > Mail Server Settings > DKIM spam protection it is required manually to enable the Use DKIM spam protection system to sign outgoing email messages option in Domains > example.com > Mail Settings.
Please sign in to leave a comment.