Re: opendkim verify, but signed email has a hardfail. Fwd: [Fwd: Auto-response from dk.elandsys.com]

From: Josef Karliak <karliak_at_ajetaci.cz>
Date: Wed, 23 Nov 2011 10:19:24 +0100

   Hi there,
   what do you think about failing dkim on our outgoing smtp server
(antivir2), and veryfication pass on my server ?

Received: from celer.ajetaci.cz (localhost [127.0.0.1])
        by celer.ajetaci.cz (Postfix) with SMTP id A203DC5A4F
        for <chose_at_ajetaci.cz>; Wed, 23 Nov 2011 07:56:04 +0100 (CET)
Authentication-Results: celer.ajetaci.cz; dkim=pass (1024-bit key)
        header.i=_at_fnhk.cz header.b=iNtt1RkD; dkim-adsp=pass
Received-SPF: pass (fnhk.cz: 195.113.123.114 is authorized to use
'josef.karliak_at_fnhk.cz' in 'mfrom' identity (mechanism
'a:antivir2.fnhk.cz' matched)) receiver=celer.ajetaci.cz;
identity=mailfrom; envelope-from="josef.karliak_at_fnhk.cz";
helo=antivir2.fnhk.cz; client-ip=195.113.123.114
Received: from antivir2.fnhk.cz (antivir2.fnhk.cz [195.113.123.114])
        by celer.ajetaci.cz (Postfix) with ESMTP id BD00FC5A44
        for <chose_at_ajetaci.cz>; Wed, 23 Nov 2011 07:56:00 +0100 (CET)
Received: by antivir2.fnhk.cz (Postfix, from userid 8)
        id 83097288F7; Wed, 23 Nov 2011 07:56:00 +0100 (CET)
Received: from antivir2.fnhk.cz (localhost [127.0.0.1])
        by vbms.DUMMY (Postfix) with SMTP id 5E59A1FF89
        for <chose_at_ajetaci.cz>; Wed, 23 Nov 2011 07:56:00 +0100 (CET)
Received: from kostnew.fnhk.cz (intr.fnhk.cz [195.113.123.99])
        by antivir2.fnhk.cz (Postfix) with ESMTP id 274391FF89
        for <chose_at_ajetaci.cz>; Wed, 23 Nov 2011 07:56:00 +0100 (CET)
X-DKIM: OpenDKIM Filter v2.4.2 antivir2.fnhk.cz 274391FF89
Authentication-Results: antivir2.fnhk.cz; dkim=fail (verification failed)
        header.i=_at_fnhk.cz header.b=iNtt1RkD; dkim-adsp=fail
Received: from [192.168.24.50] (unknown [192.168.24.50])
        by kostnew.fnhk.cz (Postfix) with ESMTP id 27A731D8AD
        for <chose_at_ajetaci.cz>; Wed, 23 Nov 2011 07:51:53 +0100 (CET)
X-DKIM: OpenDKIM Filter v2.3.2 kostnew.fnhk.cz 27A731D8AD
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=fnhk.cz; s=mail;
        t=1322031113; bh=FD+AeMxIothgfnBUmgiB3BMcpAHS75XIiHCbbzJzcPg=;
        h=Message-ID:Subject:From:To:Date:Sender;
        z=Message-ID:=20<1322031359.7604.0.camel_at_chose.fnhk.cz>|Subject:=20
         0755|From:=20Karliak=20Josef=20<josef.karliak_at_fnhk.cz>|To:=20chose
         _at_ajetaci.cz|Date:=20Wed,=2023=20Nov=202011=2007:55:59=20+0100;
        b=iNtt1RkDXvu7gAnHzy0ZbUK4Ah+3M7ST/TS7FaNKmnLwrzblQ2b8MhDohgG6SqTJ8
         80MiMZc9f2Ukfg0fbz/NsX2aXwTSpJJaHX4JUIFegBBFCajGZ2oxXDb8r+Dk/zDvNT
         n02X8ZMWQphvPK3vC5tlWlV4loSGMNoFo7FMyZ1s=

   Email is signed on kostnew.fnhk.cz, the mail is "relayed"
(relay_host in the postfix) to the antivir2.fnhk.cz that sends emails
out. Here is opendkim as a veryfier. Email is for my domain ajetaci.cz
(server celer.ajetaci.cz), opendkim is signer/verifier - here the
email PASS. So where is a point ? Why don't pass on antivir2.fnhk.cz ?
   Thanks and best regards
   J.K.

Cituji "Murray S. Kucherawy" <msk_at_blackops.org>:

> On Fri, 11 Nov 2011, Josef Karliak wrote:
>> Hi there,
>> I may found it - on fnhk.cz mail sending server (antivir2.fnhk.cz)
>> I changed in the postfix's main.cf:
>> disable_mime_output_conversion = no -> disable_mime_output_conversion = yes
>>
>> and so far so good. Elands autoresponder accepted my message,
>> DKIM=pass - see an attachment. How do you see it ? Is it OK ? Or is
>> the change in the postfix some harmfull ?
>
> Authentication-Results: mx.elandsys.com; dkim=pass
> (1024-bit key; insecure key) header.i=_at_ajetaci.cz header.b=rauoa16q;
> dkim-adsp=pass
>
> Looks OK to me.
>
> -MSK
>



-- 
Ma domena pouziva zabezpeceni a kontrolu SPF (www.openspf.org) a  
DomainKeys/DKIM (with ADSP) . Pokud mate problemy s dorucenim emailu,  
zacnete pouzivat metody overeni puvody emailu zminene vyse. Dekuji.
My domain use SPF (www.openspf.org) and DomainKeys/DKIM (with ADSP)  
policy and check. If you've problem with sending emails to me, start  
using email origin methods mentioned above. Thank you.
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.




Received on Wed Nov 23 2011 - 09:19:39 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:20:21 PST