אורי wrote on Thu, 23 Dec 2021 14:49 +00:00: > I suggest that you use/create a Gmail account, send yourself mail the way > you usually send it and check the headers from there.
I just did basically that. My copy of my post to this list a few minutes ago shows as dkim=fail on my end. My copy of a post I made to another list a few minutes before that shows as dkim=pass on my end. By "My copy" I mean the copy of the post I received through the list. The two posts were sent the same way. I suspect the list's footer breaks the DKIM-Signature body hash (bh=) verification. Cheers, Daniel > For example if I > check a mail I receive from my server (sent automatically), I receive > the following messages: > > SPF: PASS with IP 69.169.224.10 Learn more > DKIM: 'PASS' with domain amazonses.com Learn more > > You may consider sending your mail via an external email provider, such as > Amazon SES. I use them and they are very reliable. > > Thanks, > אורי > u...@speedy.net > > > On Thu, Dec 23, 2021 at 4:01 PM Ira Linux Abramov < > lists-linux...@ira.abramov.org> wrote: > >> Hey gang, >> >> I have added SPF record for my domains about 2 years ago and kinda >> forgot about it. I get a lot of reports about spam received "from my >> domain" but not from my servers. almost 50% from google, and I assume >> that's because half the world in on gmail... >> >> however today I found a report from an Israeli domain for the first >> time, the OpenU server sent me the following report and I'm not happy >> about what I am reading here. if I read it correctly, someone at >> openu.ac.il got an email I sent through this list but it is rejected >> because the DKIM is broken. If that is true there is something wrong >> with the way the huji mail server is adding the sig at the bottom, or >> something else is breaking the message, which suggests using SPF records >> may be more harmful than helpful, plus the huji server is not configured >> correctly to prevent DKIM breakage. >> >> Anyone got insights? >> >> <?xml version="1.0" encoding="UTF-8" ?> >> <feedback> >> <version>1.0</version> >> <report_metadata> >> <org_name>openu.ac.il</org_name> >> <email>mailer-dae...@openu.ac.il</email> >> <extra_contact_info></extra_contact_info> >> <report_id>8e1971$6c419ec=9144b8f822523...@openu.ac.il</report_id> >> <date_range> >> <begin>1640124003</begin> >> <end>1640210403</end> >> </date_range> >> </report_metadata> >> <policy_published> >> <domain>ira.abramov.org</domain> >> <adkim>r</adkim> >> <aspf>r</aspf> >> <p>none</p> >> <sp></sp> >> <pct>100</pct> >> </policy_published> >> <record> >> <row> >> <source_ip>132.65.116.210</source_ip> >> <count>1</count> >> <policy_evaluated> >> <disposition>none</disposition> >> <dkim>fail</dkim> >> <spf>fail</spf> >> </policy_evaluated> >> </row> >> <identifiers> >> <header_from>ira.abramov.org</header_from> >> <envelope_from>cs.huji.ac.il</envelope_from> >> </identifiers> >> <auth_results> >> <dkim> >> <domain>ira.abramov.org</domain> >> <selector>dkim</selector> >> <result>permerror</result> >> </dkim> >> <spf> >> <domain>cs.huji.ac.il</domain> >> <scope>mfrom</scope> >> <result>none</result> >> </spf> >> </auth_results> >> </record> >> </feedback> >> >> _______________________________________________ >> Linux-il mailing list >> Linux-il@cs.huji.ac.il >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il >> > > _______________________________________________ > Linux-il mailing list > Linux-il@cs.huji.ac.il > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il _______________________________________________ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
