Re: Debugging [Was Re: Using KeyTable]

From: SM <sm_at_resistor.net>
Date: Wed, 26 May 2010 07:28:08 -0700

Hi Todd,
At 12:13 25-05-10, Todd Lyons wrote:
>Did some debugging. Sendmail must be changing it. This is the
>canonicalized Sender header that opendkim is signing:
> sender:oclug-test-bounces_at_mailman.oclug.org
>
>And this is the Sender header that is in the received email:
> Sender: oclug-test-bounces_at_penguin.oclug.org

You have a CNAME for mailman.oclug.org.

>I have it set to "mailman.oclug.org", whereas the machine hostname is
>penguin.oclug.org (both are in the local-host-names w class file). So
>for some reason, sendmail is rewriting the Sender header that Mailman
>created (and signed) to the machine hostname. I do not have any kind
>of Masquerading or genericstable configured, so I am unsure why
>sendmail is doing that. To be more exact, I don't have any deep or
>meaningful experience with the Sender header specifically, so I am
>unsure if this is even expected behavior.

You can turn that sendmail feature off. The rewrite could still
occur at the verifier's end. I suggest using an "A" RR instead of the CNAME.

Regards,
-sm
Received on Wed May 26 2010 - 14:29:43 PST