[Dovecot] DKIM Verification failures

[Christian Rößner]

Hello,

First of all: I am really, really sorry for all of you that got DKIM
failure reports from my server! That was never my intention! I had some
feedback from one of the Dovecot's users who contacted me and informed me
about this circumstances. As soon as I new about it, I disabled the
reports feature.

It seems that there do exist problems with DKIM and some mailing lists.
Not only with my mail server. I have found several SSL errors, when
OpenDKIM tries to verify signatures that came from a mailing list. And in
turn my MTA tried to send a report to focus on that problem.

Yet I can not say, what is going wrong here, but OpenDKIM is really
sensitive, if something is wrong with a signature.

So as of writing this, you do not get any further report messages. For
those of you, who would like to find out, what caused these reports are
welcome to contact me. Maybe we can find the problem and eliminate it
(maybe a bug in OpenDKIM, mailman, whatever. I don't think it's part of my
configuration and therefor several other people might have this problem as
well).

Thanks in advance

Christian Roessner


Am 15.12.11 23:54 schrieb "Robert Schetterer" unter
<robert at schetterer.org>:

>Am 15.12.2011 23:25, schrieb Nikolaos Milas:
>> Hi,
>> 
>> -- This message refers to the maillist itself rather than to dovecot
>> software --
>> 
>> I have noticed that when I post to this list (only), I get DKIM
>> Verification failure reports from:
>> 
>> root at moncton.sidefx.com  (e.g. for my last post: "DKIM failure report
>> for job 4D27B5DC4E on mail.sidefx.com")
>> root at mail.rmacd.com (e.g. for my last post: "DKIM failure report for job
>> B69B3187F1 on mail.rmacd.com")
>
>> root at mx0.roessner-net.de (e.g. for my last post: "DKIM failure report
>> for job 6103B52092 on mx0.roessner-net.de")
>
>
>
>
>
>whois roessner-net.de
>
>and search the list archive for
>
>roessner mail address, guess it will no problem to contact and debug
>
>> 
>> I have not had other DKIM failure reports from anywhere and I know that
>> we should not have issues with it. An example from gmail:
>> 
>> Authentication-Results: mx.google.com; spf=pass (google.com: best guess
>> record for domain of nmilas at noa.gr designates 195.251.204.235 as
>> permitted sender) smtp.mail=nmilas at noa.gr; dkim=pass header.i=@noa.gr
>> 
>> So, whom should I contact to investigate this problem?
>> 
>> Thanks,
>> Nick
>