Hello OpenDKIM users,
I'm evaluating OpenDKIM for mails coming from Internet to my domain. I
have a trouble in mail verification from amazon.it.
Some mails from this domain fail DKIM signature verification. For instance:
Return-Path:
<20160425074014030a9b69a6184b8680cc09c75350p0eu-C3S1XNCGG2J9BA_at_bounces.amazon.it>
X-Spam-Status: No, score=-2.3 tagged_above=-999 required=4.5
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DSPAM_HAM_99=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7,
RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001,
T_REMOTE_IMAGE=0.01] autolearn=disabled
Received: from a0-145.smtp-out.eu-west-1.amazonses.com
(a0-145.smtp-out.eu-west-1.amazonses.com [54.240.0.145])
by mx.example.it (MailFarm) with ESMTP id 3qtdRh1Y8wzFpVj
for <xxx.xxx_at_example.it>; Mon, 25 Apr 2016 09:40:16 +0200 (CEST)
DMARC-Filter: OpenDMARC Filter v1.3.1 mx.example.it 3qtdRh1Y8wzFpVj
Authentication-Results: mx.example.it; dmarc=fail header.from=amazon.it
Authentication-Results: mx.example.it; spf=fail
smtp.mailfrom=20160425074014030a9b69a6184b8680cc09c75350p0eu-C3S1XNCGG2J9BA_at_bounces.amazon.it
DKIM-Filter: OpenDKIM Filter v2.10.3 mx.example.it 3qtdRh1Y8wzFpVj
Authentication-Results: mx.example.it;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=amazon.it header.i=_at_amazon.it header.b=V1ZgZYnG;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=amazonses.com header.i=_at_amazonses.com header.b=aSHkWdMg
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=35pzb2tapqjxshkrupem4gpoke7mq3tm; d=amazon.it; t=1461570015;
h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;
bh=kI6vgeAsl+YWEOBIdxBl4q+YDWpyeuzWOPHjytGdj10=;
b=V1ZgZYnG+48qG+N9ThLo2V3QfpgjHsbwnnvlQ1AkhhWOOX1bgaRvCB1xpVpZRNtJ
dEusnqn8pA5ITbQsfuJ+QefA6rD+faO9Fme31XavK6RoGalu1JkjifUpKFTcMV2fcLm
Nw3EjVzhAPtakGKOMkk/7B1h7bGVxS5UD3bqyJlc=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=ihchhvubuqgjsxyuhssfvqohv7z3u4hn; d=amazonses.com; t=1461570015;
h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Feedback-ID;
bh=kI6vgeAsl+YWEOBIdxBl4q+YDWpyeuzWOPHjytGdj10=;
b=aSHkWdMg/+ko4RV57oE+oqiTQ0WMSGeEPoN3ysf4K3yN4c+9hs6EHWLK+CMkuPDr
VAS/W0tcjak2RB1Gs446KX+f4RRd8Qf/r9MB2YIKa0NQewiTYoiIsy3ly5okuOZVT/r
Y4LIg1oQk2tuUOHc97OBoR5CFxyVlYaNt1KypnIc=
Date: Mon, 25 Apr 2016 07:40:15 +0000
From: "Amazon.it" <promotion-it_at_amazon.it>
To:
"xxx.xxx_at_example.it" <xxx.xxx_at_example.it>
Message-ID:
<010201544c5c8f06-f72b0d0b-d4cd-4826-a1bf-8e688734dcf0-000000_at_eu-west-1.amazonses.com>
Subject: Monica, la vetrina della settimana
MIME-Version: 1.0
I see that the "To" header field contains a "\r\n" after ":", I don't
know if this could be a problem.
OpenDKIM is the first milter in Postfix setup.
I also see that Spamassassin seems to validate the signature
(DKIM_VALID=-0.1). But it seems I can't use Amavis for writing AR
headers, because OpenDMARC refuses them :(
Could you give me any hints?
Thank you very much
Best Regards
Marco
Received on Wed Apr 27 2016 - 08:56:16 PST