DKIM problem validating gmail on incoming mail

Commerce3

Registered
Feb 3, 2017
2
0
1
Washington, DC
cPanel Access Level
Root Administrator
In the past few days I have received a handful of reports from clients who are hearing about emails to them bouncing with DKIM errors which so far seem to be only for gmail.com:
550 DKIM: encountered the following problem validating gmail.com: bodyhash_mismatch

I am trying to diagnose this and wondering if others have seen this or know what the issue and solution might be? Thanks
 

sukil

Active Member
Nov 15, 2005
25
0
151
cPanel Access Level
Root Administrator
I am experiencing the exact same issues from numerous clients. And I dont understand why I shall disable DKIM? Does it mean cPanel cant provide quality DKIM solution? Or is it Google at fault? Is there any document about it?

I also noticed that, the issue occurs from Google Hosted as well as the free @gmail.com accounts. And not all emails get bounced wit that error. Some get delivered while some bounce off. The same Google hosted account, one email account cant deliver emails at all while another email account in the same Google hosted doesnt experience a single bounce! All to the same domain and cPanel server and at the same time.

I have tested with dkimvalidator.com and all gmail emails show there as PASS. From the same accounts which are unable to send email and at the same time using CC. I am puzzled, if dkimvalidator says the email is ok then the same email sent using CC to my server, why is it rejecting the same email?
 

MACscr

Well-Known Member
Sep 30, 2003
198
5
168
cPanel Access Level
Root Administrator
I have been having the same issue as well with incoming email from gmail and its been pretty random and frustrating for clients.
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
550 DKIM: encountered the following problem validating gmail.com: bodyhash_mismatch
Hello,

This error message stems from the following Exim bug:

Bug 2016 – DKIM bodyhash mismatch on Gmail > 64kB

Internal case CPANEL-10799 is open to ensure the fix published by Exim is applied to the version of Exim offered with cPanel. I'll update this thread with more information on the status of this case as it becomes available. In the meantime, the workaround is to disable "Reject DKIM failures" under the "ACL Options" tab via "WHM >> Exim Configuration Manager >> Basic Editor".

Thank you.
 
  • Like
Reactions: Juan F

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
Hello,

Internal case CPANEL-10799 is included with cPanel version 62.0.12:

Fixed case CPANEL-10799: Update exim to 4.88-2.cp1162.

This version is currently published to the EDGE build tier. More information on how new builds are published is available on our cPanel & WHM Product Versions and the Release Process documentation.

Thank you.
 

Leonardo Moreno

Registered
Feb 9, 2017
1
0
1
Venezuela
cPanel Access Level
Website Owner
Hello,

Internal case CPANEL-10799 is included with cPanel version 62.0.12:

Fixed case CPANEL-10799: Update exim to 4.88-2.cp1162.

This version is currently published to the EDGE build tier. More information on how new builds are published is available on our cPanel & WHM Product Versions and the Release Process documentation.

Thank you.
Hi, is there any way to update just exim to build 4.88-2.cp1162 without having to update to the EDGE build?

Thanks in advance.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
Hi, is there any way to update just exim to build 4.88-2.cp1162 without having to update to the EDGE build?
This is unsupported, and using updates from the EDGE tier or updating directly to the EDGE tier isn't recommended for production machines. I recommend disabling "Reject DKIM failures" under the "ACL Options" tab via "WHM >> Exim Configuration Manager >> Basic Editor" as a workaround until this fix reaches your build tier.

Thank you.