Re: Majordomo & Opendkim

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Wed, 9 Apr 2014 13:28:46 -0700 (PDT)

On Wed, 9 Apr 2014, Bob wrote:
> Is there something I can put in the cunf files to stop this!!

If your signatures are passing, then there's nothing for you to adjust.
Your DKIM work is done.

This is really about DMARC. DMARC is a set of rules for detecting and
rejecting mail that doesn't appear to be authentic. Specifically, a piece
of mail arriving has to pass either DKIM or SPF (or both), and the
identity verified by those schemes has to line up with what's in the From:
field of the message. So a signature from your domain (zoso.net) would
only be useful, in DMARC terms, on mail from users at zoso.net.

If your mail is being bounced because of DMARC, then one or more receivers
has decided to start asking for enforcement of those rules. That means
you are sending mail as domain X, but X has asked everyone to bounce mail
that claims to be from X when it really is not.

Are you sending mail as some domain other than zoso.net?

-MSK
Received on Wed Apr 09 2014 - 20:29:06 PST

This archive was generated by hypermail 2.3.0 : Wed Apr 09 2014 - 20:36:01 PST