requesting help understanding DKIM logs in Postfix
Hi, I am running Postfix 2.10.x and Opendkim 2.11.0.
Mail flow is to our MX in O365 and then to smtp server for students which are on Google's Gmail.
The smtp server is configured to verify and sign.
I have logs and headers of an example email. See Below.
I am trying to figure out what these lines mean ?
Thank you.
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: not authenticated
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: failed to parse Authentication-Results: header field
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: bad signature data
I see in the headers the failure:
But I am not sure what exactly has failed when the verification occurred ??
DKIM-Filter: OpenDKIM Filter v2.11.0 mta4.uits.uconn.edu 3FCFB1804B85
Authentication-Results: mta4.uits.uconn.edu; dkim=fail reason="signature verification failed" (2048-bit key)
header.d=uconn-edu.20150623.gappssmtp.com header.i=_at_uconn-edu.20150623.gappssmtp.com header.b="YaHe5/tN"
ENTIRE LOG :
Dec 18 17:59:33 mta4 postfix/smtpd[12673]: 3FCFB1804B85: client=mail-co1nam03lp2051.outbound.protection.outlook.com[104.47.40.51]
Dec 18 17:59:33 mta4 postfix/cleanup[12951]: 3FCFB1804B85: message-id=<CABF6Y6yJ1pBveZAtj2JfAM6zqCqwxjVzQ8vUJWnx5kUok4gHjA_at_mail.gmail.com>
Dec 18 17:59:33 mta4 postfix/cleanup[12951]: 3FCFB1804B85: warning: header Subject: from mail-co1nam03lp2051.outbound.protection.outlook.com[104.47.40.51]; from=<use1_at_uconn.edu> to=<user2_at_uconn.edu> proto=ESMTP helo=<NAM03-CO1-obe.outbound.protection.outlook.com>
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: mail-co1nam03lp2051.outbound.protection.outlook.com [104.47.40.51] not internal
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: not authenticated
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: failed to parse Authentication-Results: header field
Dec 18 17:59:33 mta4 opendkim[5108]: 3FCFB1804B85: bad signature data
Dec 18 17:59:33 mta4 postfix/qmgr[13516]: 3FCFB1804B85: from=<venkat.borra_at_uconn.edu>, size=2312781, nrcpt=1 (queue active)
Dec 18 17:59:35 mta4 postfix/smtp[12231]: 3FCFB1804B85: to=<user2_at_gapps.uconn.edu>, orig_to=<user2_at_uconn.edu>, relay=aspmx.l.google.com[172.217.197.26]:25, delay=2.7, delays=0.7/0/0.07/1.9, dsn=2.0.0, status=sent (250 2.0.0 OK 1545173975 a127si861675qkf.126 - gsmtp)
Dec 18 17:59:35 mta4 postfix/qmgr[13516]: 3FCFB1804B85: removed
SOME HEADERS:
Delivered-To: user2_at_gapps.uconn.edu
Received: by 2002:a25:b589:0:0:0:0:0 with SMTP id q9-v6csp4249608ybj;
Tue, 18 Dec 2018 14:59:35 -0800 (PST)
X-Google-Smtp-Source: AFSGD/WsHQe8QJ/xlmlYtcogaM49E4sskmIeIXxZzH8SCwcsVRL1qz+pmy9YIzd+foRQipnY7QDO
X-Received: by 2002:a37:1a20:: with SMTP id a32mr18340722qka.182.1545173974934;
Tue, 18 Dec 2018 14:59:34 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1545173974; cv=none;
d=google.com; s=arc-20160816;
b=bTQYxKoNjwAJVR5bE7BaArCdzMfnZEYRBAsMT/YbC9ZAEE5nCYXkafj/p4fpfdx2xz
aqAJEtM4+0czELkHFOo0Lr4hPiAUSLUKP6cQhL2DSmTLYdixlUjXopA3YYFmcxpYZchH
5GeumqvehJBgiI5iaJRJee5JXoWWrWUwdJ1ZPP2aLbcQ7jiakRbTRNVISIdNfjt2m7r7
jB1a7ZXB+bWj6WnPnbjQeqyhZi/bFU2qlXTzGl5na85uWcojjBYsjK1kzAL3D1/+ZeuX
RvxZZf/jgPLJM7TiN/OJ6JdjwS34vrhJUO26I5GQozeIjfndJCvGry63Sp5uRJxmCmyX
ADAA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=spamdiagnosticmetadata:spamdiagnosticoutput:to:subject:message-id
:date:from:mime-version:dkim-signature:dkim-filter;
bh=IgMPCw2K0MlTelkpWsRTNwzi3HiW9+qBd8FIgi/Iu5s=;
b=kCG96I+kp3lD1nNRQyCY2h72iGDam950GbEZpg1JP004L5AAp0IZDPm34FNwixspRQ
0TygVIP1Hgo88Fzw0T2YziiNDfD6zuHF0TJV1X8zl/pD2i9G3u/JUnO+e6el5dxMJu6c
jqZQSC2ajciv1ztevb6gG6efdSRbZTYv+jfVwRXUk6AdQyaDNpJ02TKlgkCyusLYaz5h
+/PBjzWGRVUmfuKI3EwJNvlxuQ9s0+TSOPWRalowHzjDkxGE+ZTmuQUYDGdgk+7KBOIb
taV7NaTH2cAKo4UBG5bQXz5yeuoj7DG9HjCkBRPIcGvaBRWd3yMkFtTFKk0o2zpnoKCz
j5+w==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=neutral (body hash did not verify) header.i=_at_uconn-edu.20150623.gappssmtp.com header.s=20150623 header.b="YaHe5/tN";
spf=pass (google.com: domain of venkat.borra_at_uconn.edu designates 104.47.40.51 as permitted sender) smtp.mailfrom=user1_at_uconn.edu
Return-Path: <user1_at_uconn.edu>
Received: from mta4.uits.uconn.edu (mta4.uits.uconn.edu. [137.99.25.243])
by mx.google.com with ESMTP id a127si861675qkf.126.2018.12.18.14.59.34
for <user2_at_gapps.uconn.edu>;
Tue, 18 Dec 2018 14:59:34 -0800 (PST)
Received-SPF: pass (google.com: domain of user1_at_uconn.edu designates 104.47.40.51 as permitted sender) client-ip=104.47.40.51;
Authentication-Results: mx.google.com;
dkim=neutral (body hash did not verify) header.i=_at_uconn-edu.20150623.gappssmtp.com header.s=20150623 header.b="YaHe5/tN";
spf=pass (google.com: domain of venkat.borra_at_uconn.edu designates 104.47.40.51 as permitted sender) smtp.mailfrom=user1_at_uconn.edu
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03lp2051.outbound.protection.outlook.com [104.47.40.51]) by mta4.uits.uconn.edu (Postfix) with ESMTPS id 3FCFB1804B85 for <user2_at_uconn.edu>; Tue, 18 Dec 2018 17:59:33 -0500 (EST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mta4.uits.uconn.edu 3FCFB1804B85
Authentication-Results: mta4.uits.uconn.edu; dkim=fail reason="signature verification failed" (2048-bit key)
header.d=uconn-edu.20150623.gappssmtp.com header.i=_at_uconn-edu.20150623.gappssmtp.com header.b="YaHe5/tN"
Received: from BYAPR05CA0089.namprd05.prod.outlook.com (2603:10b6:a03:e0::30) by CY1PR05MB2667.namprd05.prod.outlook.com (2a01:111:e400:c61c::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1446.9; Tue, 18 Dec 2018 22:59:30 +0000
Received: from BN3NAM01FT046.eop-nam01.prod.protection.outlook.com (2a01:111:f400:7e41::208) by BYAPR05CA0089.outlook.office365.com (2603:10b6:a03:e0::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1446.9 via Frontend Transport; Tue, 18 Dec 2018 22:59:30 +0000
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (104.47.32.51) by BN3NAM01FT046.mail.protection.outlook.com (10.152.66.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1446.11 via Frontend Transport; Tue, 18 Dec 2018 22:59:30 +0000
Received: from SN1NAM01FT025.eop-nam01.prod.protection.outlook.com (10.152.66.59) by BN3NAM01TH006.eop-nam01.prod.protection.outlook.com (10.152.67.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1446.11; Tue, 18 Dec 2018 22:57:54 +0000
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (104.47.41.57) by SN1NAM01FT025.mail.protection.outlook.com (10.152.65.210) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1446.11 via Frontend Transport; Tue, 18 Dec 2018 22:57:53 +0000
Received: from SN4PR0501CA0064.namprd05.prod.outlook.com (2603:10b6:803:41::41) by CO1PR05MB395.namprd05.prod.outlook.com (2a01:111:e400:1042::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.1446.11; Tue, 18 Dec 2018 22:57:49 +0000
Received: from BY2NAM01FT050.eop-nam01.prod.protection.outlook.com (2a01:111:f400:7e42::202) by SN4PR0501CA0064.outlook.office365.com (2603:10b6:803:41::41) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1446.9 via Frontend Transport; Tue, 18 Dec 2018 22:57:48 +0000
Authentication-Results: spf=pass (sender IP is 209.85.167.43) smtp.mailfrom=uconn.edu; uconn.edu;
dkim=pass (signature was verified) header.d=uconn-edu.20150623.gappssmtp.com;uconn.edu; dmarc=bestguesspass action=none header.from=uconn.edu;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of uconn.edu designates 209.85.167.43 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.167.43; helo=mail-lf1-f43.google.com;
Received: from mail-lf1-f43.google.com (209.85.167.43) by BY2NAM01FT050.mail.protection.outlook.com (10.152.69.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA) id 15.20.1446.11 via Frontend Transport; Tue, 18 Dec 2018 22:57:48 +0000
Received: by mail-lf1-f43.google.com with SMTP id n18so13554472lfh.6
for <user2_at_uconn.edu>; Tue, 18 Dec 2018 14:57:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=uconn-edu.20150623.gappssmtp.com; s=20150623;
h=mime-version:from:date:message-id:subject:to;
bh=pIokNio1sOru2X2IXD/adAprKt/VjEef1LQX8y6pYzo=;
b=YaHe5/tNU/wDOQbwIeeV+sI+oSx/zadV0+6a9bt6CVbydDy2o4UVwMBTSm3VO9FntD
4bivvlAn0mQTlZaW7B5XD7LkJGL8nAG9W508yddWwtubHFmhcp8qi/LCpf0AvHfajJcv
v0UYa2rHp4Fe2RCUST0Xjc6eRFeMnrytSsZgAsQkFIUn33OZc3qAq8RySuKlG+Ot6ufJ
5YkTg29ttAWRrbpi4eIeyQBC89jZtiYzLmNLLpSIUe/abFSpDkCmBCOLLai2y/8MW7K5
ZgivkOod5ZuQWeGba7JOiUIg3alwAcxedVpEVsPuW2s8fuKcmdrM/5RG+500dO5YXsEe
ktSg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=pIokNio1sOru2X2IXD/adAprKt/VjEef1LQX8y6pYzo=;
b=txUPDTFtYQ4XmLSECfMm+ANOos+V3VusIHGm0k5F+yVeh/Wg7tGqE7ci/Tf9iSTRXW
20d7OcOgylyv0bX0i2A6uWmte75BaO8ZH+dSXzjqlzpCVpCHPeom+dE1ec1woUYx20Uo
Fb0GGryPpYyyh1mTVu8YXE8ScO78svV6YbWMVooaqXgDd+PpNyGKOmmDTrR19tWjuUOg
DdsMQ4OwjolEmRKB70c/Sb0eoSFMvx3ApTsfJXJ9SsDP5ZxZ/JjK+7r194oNrM3GW9KI
LCoMp2lra1SM7KtjhRze0g4kTOHDICn36Gx3HhQJdWjFtr/pLecuZUUIVNzZg+QB6Dbg
pxGg==
X-Gm-Message-State: AA+aEWa8MoKnKYFgKeRibieJrfM1RfPOPvINRtbl1TBM9WwNzuGsuvTM 4rN0yScEg6jkuzA0RDECuz2lVqhdYZ02pywRO95RkSVPXSk=
X-Received: by 2002:a19:ced3:: with SMTP id e202mr10917139lfg.13.1545173866003; Tue, 18 Dec 2018 14:57:46 -0800 (PST)
MIME-Version: 1.0
From: user1 <user1_at_uconn.edu>
Date: Tue, 18 Dec 2018 17:57:40 -0500
Message-ID: <CABF6Y6yJ1pBveZAtj2JfAM6zqCqwxjVzQ8vUJWnx5kUok4gHjA_at_mail.gmail.com>
Subject:
To: user2_at_uconn.edu
-ANGELO FAZZINA
ITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail
angelo_at_uconn.edu
University of Connecticut, ITS, SSG, Server Systems
860-486-9075
Received on Wed Dec 19 2018 - 17:10:31 PST
This archive was generated by hypermail 2.3.0
: Thu Dec 20 2018 - 06:00:00 PST