> "Bad signature" means the message was altered in transit somehow. It probably means that server2->server1 gets a header field
> change somehow.
>
> Try turning on Diagnostics, and then examine the "z=" tag compared to the received message and see if you can spot any
> differences. You could also use KeepTemporaryFiles at both ends
> (since you control both ends) and then diff the files to see what's getting modified. Also, verify that everything is lined
> up properly with your keys using opendkim-testkey.
I found it. Sendmail at my side breaks the field named "references", near the 900+ character with "! " symbols. I don't know why
sendmail is doing it and simply instructed opendkim to omit this filed while signing.
--
Pavel Sokolov
Received on Sat Jun 18 2011 - 23:51:34 PST