Re: do we block ourself ?

From: SM <sm_at_resistor.net>
Date: Tue, 13 Dec 2011 14:55:17 -0800

Hi Andreas,
At 14:41 13-12-2011, Andreas Schulze wrote:
>from my logs:

[snip]

>Dec 13 23:32:04 taro opendkim[1325]: 0F0352E28: message has
>signatures from opendkim.org, andreasschulze.de
>Dec 13 23:32:04 taro opendkim[1325]: 0F0352E28: DKIM verification successful
>Dec 13 23:32:04 taro opendkim[1325]: 0F0352E28 blocked by reputation
>on opendkim.org
>Dec 13 23:32:04 taro postfix/cleanup[1792]: 0F0352E28:
>milter-reject: END-OF-MESSAGE from
>mx.ipv6.elandsys.com[2001:470:f329:1::1]: 4.7.1 Service unavailable
>- try again later; from=<opendkim-dev-bounce_at_lists.opendkim.org>
>to=<$Andreas> proto=ESMTP helo=<mx.ipv6.elandsys.com>

That's an interesting question. The quick fix is to whitelist
messages with an opendkim.org signature. That doesn't scale as we
then have to figure out the criteria for that list. It could be a
local policy override to get around such problems.

BTW, although opendkim.org DKIM signatures pass verification, please
take into account the odd case where it may be broken.

Regards,
-sm
Received on Tue Dec 13 2011 - 22:55:41 PST