Re: opendkim AUTH pass-es for received mail, but fails on forward ...

From: <locuse_at_mm.st>
Date: Tue, 10 Apr 2012 20:00:37 -0700

> So what role does your opendkim filter have in all of this? I'm confused now.

the role is that it's checking/authenticating inbound mail on my server.
 and opendkim is reporting a "fail".

i've no new info. all of the info i have has been posted. but let's try
again:

i have one mail server, hostname == "zimbra.locusetest.net".

it runs ZImbra as the mailserver app.

it hosts mail for two domains,
 (1) doma.locustest.net
 (2) domb.locustest.net

opendkim is installed on the mail server.

ZImbra is configured to use opendkim.

opendkim is configured to use separate/unique key for signing outbound
mail for each domain. it works fine.

inbound mail is checked/auth'd by opendkim.

i send an email from "me_at_gmail.com" to "locuse_at_doma.locusetest.net".
this received email, in this account, shows gmail's signing of the
message. opendkim checks & authenticates it, and gives it a "pass".

if that first mail is automatically redirected by a server-side sieve
filter, FROM the "locuse_at_doma.locusetest.net" TO another account,
"locuse_at_domb.locusenet.net", on the same
box/mail-server-instance/opendkim-instance, it gets processed,
apparently, again, by opendkim.

the headers of this 2nd account's received message, which is the one
forwarded from the 1st account by the server-side sieve rule, clearly
show a 2nd opendkim header, and, now, gets a "fail".

hth.
Received on Wed Apr 11 2012 - 03:00:50 PST