RE: Debuging vbr?

From: Murray S. Kucherawy <msk_at_cloudmark.com>
Date: Fri, 22 Oct 2010 21:21:11 -0700

> -----Original Message-----
> From: opendkim-users-bounce_at_lists.opendkim.org [mailto:opendkim-users-bounce_at_lists.opendkim.org] On Behalf Of Fredrik Pettai
> Sent: Wednesday, October 20, 2010 5:04 AM
> To: opendkim-users_at_lists.opendkim.org
> Subject: Debuging vbr?
>
> Hi,
>
> I'm getting vbr failures on my vbr+dkim-signed emails and I haven't
> manage to debug it properly.
> (DKIM verifies fine)
>
> Oct 20 13:45:38 myhost opendkim[22991]: o9KBjZ7J006908:
> somehost.domain.se [192.36.x.y] not internal
> Oct 20 13:45:38 myhost opendkim[22991]: o9KBjZ7J006908: not
> authenticated
> Oct 20 13:45:38 myhost opendkim[22991]: o9KBjZ7J006908: no signing
> domain match for `nordu.net'
> Oct 20 13:45:38 myhost opendkim[22991]: o9KBjZ7J006908: no signing
> subdomain match for `nordu.net'
> Oct 20 13:45:38 myhost sm-mta[6908]: o9KBjZ7J006908: Milter insert (1):
> header: Authentication-Results: myhost.otherdomain.se; dkim=pass
> (1024-bit key)\n\theader.i=_at_nordu.net header.b=LtviDL3m; dkim-adsp=pass
> Oct 20 13:45:39 myhost sm-mta[6908]: o9KBjZ7J006908: Milter insert (1):
> header: Authentication-Results: myhost.otherdomain.se vbr=vbr-info.md
> header.nordu.net=fail

First of all, it looks like the construction of the Authentication-Results header field is buggy. I'll fix that up for 2.2.1.

> That's the maximum of output I get by using ./opendkim (opts) -vvv -W
> Is there a way to make (especially the vbr part) more verbose so I can
> pinpoint why vbr fails?

Not without changes to the API and such.

If you're any good with debuggers, I would suggest putting a breakpoint at vbr_query() and walking through it to see what queries it's sending, what it's getting back, and how that all lines up.

If you can send me a sample of a real message that's failing this way, I can try to debug it. But don't redact any of the data; I need to replicate the same queries your system is doing.

2.2.1 is due out on Monday, so if you can get this to me over the weekend and it turns out to be something easily fixed or explained, we can possibly get it in. (Sorry for the late response...)

-MSK
Received on Sat Oct 23 2010 - 04:21:21 PST