The system failed to complete validation of “domainname”’s “DKIM”because of an error: (XID dxndq2) DNS returned “SERVFAIL”

[SandyPrab]

Today, we have this problem for one domain, we check at mxtoolbox nothing wrong

Message:
The system failed to complete validation of “domainname.com”’s “DKIM” because of an error: (XID dxndq2) DNS returned “SERVFAIL”(code 2) in response to the system’s query for “default._domainkey. " TXT Records


Anyone have same problem?

 

[cPanelLauren]

If you run

dig default._domainkey.domainname.com

Do you receive any results?

 

[SandyPrab]

This one


; <<>> DiG 9.11.4-P2-RedHat-9.11.4-16.P2.el7_8.6 <<>> default._domainkey.domain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;default._domainkey.domain.com. IN A

;; AUTHORITY SECTION:
domain.com. 1799 IN SOA ns11.nameserver.org. support.domain.com. 2020072301 3600 1800 1209600 86400

;; Query time: 16 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Jul 23 05:34:31 EDT 2020
;; MSG SIZE rcvd: 126

If you run

dig default._domainkey.domainname.com

Do you receive any results?

 

[cPanelLauren]

I am so very sorry I forgot a key portion of that when I gave you the command to run.

It should be:

dig txt default._domainkey.domainname.com

 

[SandyPrab]

I am so very sorry I forgot a key portion of that when I gave you the command to run.

It should be:

dig txt default._domainkey.domainname.com

Okay, this one when we run that, looks like normal but in cPanel still have that message

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-16.P2.el7_8.6 <<>> txt default._domainkey.domain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61546
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;default._domainkey.domain.com. IN TXT

;; ANSWER SECTION:
default._domainkey.domain.com. 14399 IN TXT "v=DKIM1; k=rsa; p=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxEjNzR5AKM6xpWSE2R+xxxxxxxxxxxxY46xggVZ8" "Eq/xxxxxxxxxxxxxayME/xxxxxxxxxxxxxxxxxxxxxxxx7zR7iH+rKA+xxxxxxxxxpVPuhzgcRRrYbeVQBa9xB/xxxxxxxxMgKZ988yWgRMiPSNAElwIDAQAB;"

;; Query time: 21 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Jul 24 02:52:26 EDT 2020
;; MSG SIZE  rcvd: 491

 

[cPanelLauren]

That comes back normal, did you run that from the server or from an outside source?

 

[SandyPrab]

That comes back normal, did you run that from the server or from an outside source?

We run that from root server

 

[cPanelLauren]

@SandyPrab

Do you happen to know if you have port 53 open on the server and/or if you receive the same results when running the dig query from outside the server?

 

[aadii786]

dig defualt.domainkey.domain.com

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.5 <<>> defualt.domainkey.two.com.pk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44597
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;defualt.domainkey.two.com.pk. IN A

;; AUTHORITY SECTION:
two.com.pk. 900 IN SOA gabe.ns.cloudflare.com. dns.cloudflare.com. 2037388109 10000 2400 604800 3600

;; Query time: 4 msec
;; SERVER: 10.255.250.40#53(10.255.250.40)
;; WHEN: Sun May 30 01:13:20 PKT 2021
;; MSG SIZE rcvd: 119



I'm having same this issue. please help me.

 

[cPRex]

@aadii786 - it's best to create a new thread as we don't always see replies on older ones. I also edited the post to remove the public domain name for security reasons.

I do see your domain is using the Cloudflare DNS system, so the domain key would need to be created there instead of on cPanel. Have you added the zone record there as well?