Re: [mailop] some pphosted (proofpoint) outbound mail failing dkim validation

2017-01-22 Thread ml+mailop
Is the bh= value correct? AFAICT that would mean the headers have been modified -- which can be the case if sendmail is involved and it gets bogus input (e.g., from broken M$ MUA not using the proper syntax). BTW: $ dkim-vrfy.pl < yourmessage signature identity: @five-ten-sg.com verify result: fai

Re: [mailop] some pphosted (proofpoint) outbound mail failing dkim validation

2017-01-21 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sun, 2017-01-22 at 01:03 -0500, Phil Pennock wrote: > Which MTA are you using? Sendmail 8.16 with opendkim 2.10.3 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAliEUs4ACgkQL6j7milTFsHk/gCfc0DeEJN+rCn9lTN2wdgCbFK

Re: [mailop] some pphosted (proofpoint) outbound mail failing dkim validation

2017-01-21 Thread Phil Pennock
On 2017-01-21 at 17:57 -0800, Carl Byington wrote: > About 10% of the mail from invista.com is failing validation. That mail > has two signatures from from invista.com and kochind.onmicrosoft.com. > Either both signatures validate, or they both fail. It seems there is > something in the pphosted ma

[mailop] some pphosted (proofpoint) outbound mail failing dkim validation

2017-01-21 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 About 10% of the mail from invista.com is failing validation. That mail has two signatures from from invista.com and kochind.onmicrosoft.com. Either both signatures validate, or they both fail. It seems there is something in the pphosted mail flow th