Re: DKIM hardfail (with eg. google or test sites)

From: Andreas Schulze <sca_at_andreasschulze.de>
Date: Sat, 16 Mar 2013 13:10:38 +0100

Am Sa, 16.03.2013, 10:58 schrieb Matthias Weiss:
> I increased the verbosity of logging of the postfix cleanup process and I
> think I found something interesting:

> unix:/var/spool/postfix/milter/opendkim: Date: Sat, 16 Mar 2013 10:41:27 +0100 (CET)

your sample sendmail input did not contain a date header.
postfix add one. That's a change of the message.
Together with your opendkim setting "AllwaysSignHeaders: ..., date, ... It may be the reason.

When one establish message signing in the MTA its allways a good idea to configure
same/other MTA (in your own infrastructure) to not *change* messages by other ways.

Andreas
Received on Sat Mar 16 2013 - 12:10:53 PST