Re: [OFF]: DKIM broken by certain email clients

[James Brown]

On 24/09/2008, at 12:00 PM, Victor Duchovni wrote:

On Wed, Sep 24, 2008 at 11:05:21AM +1000, James Brown wrote:

I've just set up DKIM on my mail system (via Astaro Security Gateway).

If I send an email to [EMAIL PROTECTED] to comes back
saying:

DKIM check details:
Result: fail (signature doesn't verify)

The same thing happens sending from my iPhone.


if I use webmail (Roundcube or Ilohamail) to send the email.

All are sending through the same mail server (Postfix), same account,
with and without SSL.

Has anyone had any similar problems with DKIM and Mail.app?

But it works fine sending from the same computer using Thunderbird. Or

to 7-bit later?

The MX host for verifier.port25.com seems to offer 8BITMIME, how does
your mail get there after it is signed?


smtp-finger: > EHLO amnesiac.example.com
smtp-finger: < 250-verifier.port25.com says hello
smtp-finger: < 250-ENHANCEDSTATUSCODES
smtp-finger: < 250-PIPELINING
smtp-finger: < 250-CHUNKING
smtp-finger: < 250-8BITMIME
smtp-finger: < 250-AUTH CRAM-MD5
smtp-finger: < 250-AUTH=CRAM-MD5
smtp-finger: < 250-XACK
smtp-finger: < 250-SIZE 0
smtp-finger: < 250-VERP
smtp-finger: < 250 DSN

--
        Viktor.

Is the incoming message 8-bit MIME? Is it signed first and down- converted smtp-finger: < 220 verifier.port25.com (PowerMTA(TM) v3.5r1) ESMTP service ready

Thanks Viktor.

When I telnet in from home to my work mail server I get:

telnet mail.bordo.com.au 2525
Trying 203.206.204.254...
Connected to mail.bordo.com.au.
Escape character is '^]'.
220 mail.bordo.com.au ESMTP Postfix
ehlo me
250-mail.bordo.com.au
250-SIZE 102400000
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN



How can I tell if I'm sending as 8-bit or 7-bit MIME?

Thanks,

James.

But this goes directly to my postfix server, bypassing the Astaro SMTP Proxy as I'm using port 2525 - my ISP blocks port 25 accept to their mail server). Would you mind telnetting in on port 25 and see what it says?

smime.p7s
Description: S/MIME cryptographic signature