On Thu, 17 Dec 2009, Kerstin Espey wrote: > > after upgrading to exim 4.71 we get the following error in paniclog: > > > > 2009-12-02 22:06:05 1NFwOj-0005JP-2X DKIM: Error while running this message > > through validation, disabling signature verification. > > 2009-12-03 00:36:35 1NFykN-0007Js-6B DKIM: Error while running this message > > through validation, disabling signature verification. > > 2009-12-03 01:01:03 1NFz83-0001RP-9U DKIM: Error while running this message > > through validation, disabling signature verification. > > > > Still no one else with this error?
Sorry, yes, I get it too, but I don't have anything much to offer. That's not strictly true, I did start to write something about this and other issues but not sent it. Made some documentation comments in bugzilla. > We now have a list of 17 IP addresses, which do often trigger the error. > It looks like it depends on the sender address, if we get the error or > not. I have done a tcpdump for some of these ip, and passed the data to > exim with debugging mode enabled. No error occurs. > > The mails I have seen so far, are sent from qmail-servers. But I'm not > sure if this is always the case. They don't have any dkim-header, but a > header "DomainKey-Status: no signature". All of them seem to be > newsletters. I had added to data acl: warn condition = ${if def:h_dkim-signature:} log_message = Recording DKIM-Signature: $h_dkim-signature but it didn't record anything for these failing messages. I hadn't got any further, so your comment about "DomainKey-Status: no signature" was news to me, and maybe explains why I get nothing logged. Here are the hosts I see: H=(mail.vgpharma.com) [61.129.51.38] H=(smtp.outsourcingprofessional.org) [216.139.217.166] H=(xbadon.info) [86.104.195.114] H=(xbutcher.info) [86.104.195.85] H=(xcarland.info) [86.104.195.81] H=(xcostello.info) [86.104.195.90] H=(xelizondo.info) [86.104.195.64] H=(xforcier.info) [86.104.195.108] H=(xheloise.info) [86.104.195.91] H=(xhendrich.info) [86.104.195.109] H=(xhoaglin.info) [86.104.195.117] H=(xhuberty.info) [86.104.195.94] H=(xjanet.info) [86.104.195.103] H=(xlemley.info) [86.104.195.68] H=(xmazzarella.info) [86.104.195.92] H=(xrueth.info) [86.104.195.69] H=(xshubin.info) [86.104.195.118] H=(xspeigner.info) [86.104.195.97] H=(xspruill.info) [86.104.195.106] H=(xtingler.info) [86.104.195.80] H=(xtwist.info) [86.104.195.84] H=(xwhorton.info) [86.104.195.93] H=81-179-28-156.dsl.pipex.com (office.scotwebshops.com) H=ausc60ps301.us.dell.com [143.166.148.206] H=chrome-onfofo.cccampaigns.net [81.92.121.144] H=healthorbit.ca (server5131.internal.developersnetwork.com) H=lv3-4.domainxyz.de [87.119.205.37] H=mercure-ei.ccemails.net [81.92.123.8] H=mercure-onei.ccemails.net [81.92.123.18] H=mercure-sitw.ccemails.net [81.92.123.62] H=n1-vm2.bullet.mail.sp2.yahoo.com [67.195.134.222] H=n73b.bullet.mail.sp1.yahoo.com [98.136.45.46] H=ns6618.ovh.net [87.98.222.132] H=raspberry.hosteurope.com (raspberry.webfusion.co.uk) H=snt0-omc2-s7.snt0.hotmail.com [65.55.90.82] H=snt0-omc4-s35.snt0.hotmail.com [65.55.90.238] H=theadventuristsmail.bucklehosting.com (mail.bucklehosting.com) Hmm. Looking more closely at them, the yahoo ones are more suspicious. Seemingly the validation error occurred but I also did record the signature header, which I will send to Tom direct to take a look at. Jethro. . . . . . . . . . . . . . . . . . . . . . . . . . Jethro R Binks Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/