DKIM Test Settings

This help section describes the DKIM Test Settings dialog of ORF.

Evaluation Tab

Blacklist email on "neutral" and "permerror"

Emails that fail the signature or body hash verification are blacklisted by default. However, many times signatures do not verify for other reasons, such as due to a missing key or a configuration error in the public key record or in the signature itself. Enable this option to blacklist emails not only on “fail” but on “netutral” and “permerror” results as well.

Maximum check time

Control how much time ORF may spend with evaluating the DKIM signatures. As evaluation may require multiple DNS lookups, it is recommended to limit the maximum time to avoid email transmission timeouts.

Maximum number of signature checks per email

A single email may contain several digital signatures. This value controls the maximum number of signatures to be tested.

Exceptions Tab

Sender Email Exceptions

Use this list to exclude specific senders from the DKIM test by the sender email address or domain.

Sender IP Exceptions

Use this list to exclude specific senders from the DKIM test by the sender IP address or network range.

Log Tab

Always log DKIM check results

Set this checkbox to log DKIM evaluation results, even if the email was not blacklisted. The evaluation result appears in the log as a separate entry and logged only if the email was signed.

Include verification details in log messages

Set this checkbox to include a detailed summary of the tested signatures in the DKIM log messages.