DKIM hardfail (with eg. google or test sites)

From: Matthias Weiss <matthias_at_more-onion.com>
Date: Fri, 15 Mar 2013 12:01:50 +0100

Hello!

We configured our mail server (postfix) to use OpenDKIM about 1 year ago and
it was working flawlessly.

Today I discovered that our mail signing with OpenDKIM isn't working any more,
it fails at Google Mail but also with email test sites.

Since last year our mail server setup wasn't changed in any significant way,
e.g. I tweaked the bounce queue settings in postfix a bit, but no major
changes in our setup. The opendkim setup remained unchanged.
We did some software updates for postfix and opendkim, but that's it.
Our current versions are
postfix 2.9.5
opendkim-2.6.7-r1

Can anyone suggest a strategy how I can find out why our headers get signed
wrongly suddenly?

regards
matthias
Received on Fri Mar 15 2013 - 11:02:04 PST