Attempting to Setup DKIM on GSuite

[Dbyford]

SPF works great
MXTool Box is reporting no DKIM Record Found
I have tried with both 1024 and 2048 keys

Domain: Byford.us

I get the following from a Dig:

byfodw@checkmate ~ % dig @ns18.zoneedit.com cname google._domainkey.byford.us

; <<>> DiG 9.10.6 <<>> @ns18.zoneedit.com cname google._domainkey.byford.us

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38628

;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1



;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 4096

; PAD: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ("..............................................................................................................................................................................................................................................................................................................................................................")

;; QUESTION SECTION:

;google._domainkey.byford.us. IN CNAME

;; AUTHORITY SECTION:

byford.us. 2399 IN SOA dns0.zoneedit.com. zone.zoneedit.com. 1686345595 3600 600 604800 300

;; Query time: 3249 msec

;; SERVER: 139.177.204.42#53(139.177.204.42)

;; WHEN: Fri Jun 09 16:39:40 CDT 2023

;; MSG SIZE rcvd: 468

 

[Chris Cherry]

You're digging for a CNAME record which doesn't exist. Your DKIM is stored as a TXT record.

To query the record, you would use:

dig @ns18.zoneedit.com txt google._domainkey.byford.us

; <<>> DiG 9.16.27-Debian <<>> @ns18.zoneedit.com txt google._domainkey.byford.us
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28433
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: ab09d5b97092cb7f7d6a492164839ff6934d8fad5c956061 (good)
;; QUESTION SECTION:
;google._domainkey.byford.us. IN TXT

;; ANSWER SECTION:
google._domainkey.byford.us. 300 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCq0n51FUpzoTs8Qp6ewwdg00kZA7xSwy0JBUpcWyeEomOSJFvcizSLItRhBOy+hRFUFuHJiMRXO67sC/3RFM9h/LFe3l78qRKpWQdcQVZbFMzGbHh2lcuS/foG+JK7PVOdnVfhhhJ7vTUe3ZreOrstlXkufDMsA+jjkak3hsHkuQIDAQAB;"

;; Query time: 32 msec
;; SERVER: 139.177.204.42#53(139.177.204.42)
;; WHEN: Fri Jun 09 21:56:06 UTC 2023
;; MSG SIZE rcvd: 332

 

[Dbyford]

That looks better.. Any idea why external verification would fail?

 

[Dbyford]

Image attached

 

[Chris Cherry]

You're likely using the DKIM checker on MXToolbox to check "byford.us" instead of "google._domainkey.byford.us".

 

[Dbyford]

Thank you the syntax wasn't correct. Have a great weekend nothing to solve here. Appreciate the help!

 

[Chris Cherry]

You're welcome - and have an excellent one as well.