On Wed, Sep 24, 2008 at 11:05:21AM +1000, James Brown wrote: > I've just set up DKIM on my mail system (via Astaro Security Gateway). > > If I send an email to [EMAIL PROTECTED] to comes back > saying: > > DKIM check details: > Result: fail (signature doesn't verify) > > The same thing happens sending from my iPhone. > > But it works fine sending from the same computer using Thunderbird. Or > if I use webmail (Roundcube or Ilohamail) to send the email. > > All are sending through the same mail server (Postfix), same account, > with and without SSL. > > Has anyone had any similar problems with DKIM and Mail.app?
Is the incoming message 8-bit MIME? Is it signed first and down-converted to 7-bit later? The MX host for verifier.port25.com seems to offer 8BITMIME, how does your mail get there after it is signed? smtp-finger: < 220 verifier.port25.com (PowerMTA(TM) v3.5r1) ESMTP service ready smtp-finger: > EHLO amnesiac.example.com smtp-finger: < 250-verifier.port25.com says hello smtp-finger: < 250-ENHANCEDSTATUSCODES smtp-finger: < 250-PIPELINING smtp-finger: < 250-CHUNKING smtp-finger: < 250-8BITMIME smtp-finger: < 250-AUTH CRAM-MD5 smtp-finger: < 250-AUTH=CRAM-MD5 smtp-finger: < 250-XACK smtp-finger: < 250-SIZE 0 smtp-finger: < 250-VERP smtp-finger: < 250 DSN -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:[EMAIL PROTECTED]> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.