On 2/10/21 6:42 AM, nikos wrote:
> 
> On 9/2/2021 7:00 ΞΌ.ΞΌ., mailman-users-requ...@python.org wrote:
>> On 2/8/21 1:46 AM, nikos wrote:
>>> Hello list.
>>>
>>> I'm running a Centos 7 mailserver with multiple domains. I create a list
>>> for one of them and found at code 2 lines of DKIM:
>>>
>>> dkim=pass (1024-bit key) header.d=...
>>>
>>> dkim=fail reason="signature verification failed" (1024-bit key)
>>> header.d=...
>>>
>>> I guess that was the reason that many recipients didn't receive any
>>> email, especially yahoo users.
>>>
>>> Why there are 2 lines of Dkim and why the second is fail? SPF and DMARC
>>> are pass.
>> Please post all of the headers from the received message, not just these
>> two partial ones out of context. If you want to munge user and domain
>> names, you can, but do so in a way that we can tell what's what.
> 
> Hello. The full headers of DKIM are:
> 
> dkim=pass (1024-bit key) header.d=eratospe.org header.i=@eratospe.org
> header.b="svQ52cQj";
> dkim=fail reason="signature verification failed" (1024-bit key)
> header.d=eratospe.org header.i=@eratospe.org header.b="XUaar9fG"


I asked for ALL the headers, not just the two you show, but in any case,
what I think is happening is there is more than one DKIM signature in
the mail. The first is before list transformations such as prefixing the
Subject: or adding a footer and the second is after. The first fails
because of the list transformations and the second passes.


> I set REMOVE_DKIM_HEADERS = Yes

This may make a difference, but it shouldn't. According to
<https://www.rfc-editor.org/rfc/rfc6376.html#section-6.1> a message with
a good signature should verify even if there are also bad signatures
present.

-- 
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
------------------------------------------------------
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
    https://mail.python.org/archives/list/mailman-users@python.org/

Reply via email to