On 25/09/2008, at 11:03 PM, Mark Martinec wrote:
James,I'll have to work out how to turn off going through amavisd-new next.amavisd-new is DKIM-clean, it will not break a signature. Something else is modifying your Mime-Version header field. Mark
Yes, I thought it must be DKIM-clean, but took it out of the traffic flow and I still had problems. I did the same with ASSP. So that leaves either a faulty setup or bug in: the mail client, Postfix or Astaro. Given how robust Postfix I doubt if there is a bug there. But something being misconfigured by me is highly likely.
Examining the headers of the email I sent to this list:1. Received: from [192.168.1.10] ([127.0.0.1] helo=[192.168.1.10]) by ASSP-nospam; 25 Sep 2008 11:30:43 +1000
OK. This is from my computer to ASSP (running on the mail server).2. Received: from [192.168.1.10] (localhost [127.0.0.1]) by mail.bordo.com.au (Postfix) with ESMTP id F1C65438F9BB for <postfix-users@postfix.org >;Thu, 25 Sep 2008 11:30:43 +1000 (EST)
ASSP sends it to Postfix.3. Received: from mail.bordo.com.au ([127.0.0.1]) by localhost (mail.bordo.com.au [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pW2vMuVVzAvF for <postfix-users@postfix.org>; Thu, 25 Sep 2008 11:30:44 +1000 (EST)
Postfix sends it to amavisd-new on port 10024.4. Received: from localhost (localhost [127.0.0.1]) by mail.bordo.com.au (Postfix) with ESMTP id 937DC438F9DE for <postfix-users@postfix.org >; Thu, 25 Sep 2008 11:30:48 +1000 (EST)
amavisd-new re-injects it back into Postfix queue.5. Received: from [192.168.1.9] (port=62062 helo=mail.bordo.com.au) by astaro1.bordo.com.au with esmtp (Exim 4.69) (envelope-from <[EMAIL PROTECTED] >) id 1Kifh5-0007BX-2h for postfix-users@postfix.org; Thu, 25 Sep 2008 11:30:59 +1000
Postfix sends it to the Astaro box. This should be where it gets DKIM signed and sent to the internet. Nothing suspicious up to now, correct?
6. Received: from [192.168.1.10] ([127.0.0.1] helo=[192.168.1.10]) by ASSP-nospam; 25 Sep 2008 11:30:43 +1000
????? My computer sends the email again?? We are back at the start for some reason!
7. Received: from [192.168.1.10] (localhost [127.0.0.1]) by mail.bordo.com.au (Postfix) with ESMTP id F1C65438F9BB for <postfix-users@postfix.org >; Thu, 25 Sep 2008 11:30:43 +1000 (EST)
ASSP sending to Postfix.8. Received: from mail.bordo.com.au ([127.0.0.1]) by localhost (mail.bordo.com.au [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pW2vMuVVzAvF for <postfix-users@postfix.org>; Thu, 25 Sep 2008 11:30:44 +1000 (EST)
Postfix to amavisd-new.9. Received: from localhost (localhost [127.0.0.1]) by mail.bordo.com.au (Postfix) with ESMTP id 937DC438F9DE for <postfix-users@postfix.org >; Thu, 25 Sep 2008 11:30:48 +1000 (EST)
Postfix reinjection.10. Received: from [192.168.1.9] (port=62062 helo=mail.bordo.com.au) by astaro1.bordo.com.au with esmtp (Exim 4.69) (envelope-from <[EMAIL PROTECTED] >) id 1Kifh5-0007BX-2h for postfix-users@postfix.org; Thu, 25 Sep 2008 11:30:59 +1000
Postfix to Astaro. Don't know if Astaro re DKIM signs it here or now.11. Received: from astaro1.bordo.com.au (203-206-204-254.perm.iinet.net.au [203.206.204.254]) by english- breakfast.cloud9.net (Postfix) with ESMTP id 11BCEC9911 for <postfix-users@postfix.org >; Wed, 24 Sep 2008 21:31:02 -0400 (EDT)
Message delivered to destination mail server. How can this happen??The Astaro box is doing S/MIME signing and encrypting, but I got the same DKIM failure with it turned off.
Same for Mail.app using SSL on port 465. Same error when I turned that off. (I'll send this on without SSL).
This has me totally mystified. James.I still don't understand how using a different mail client can affect things.
smime.p7s
Description: S/MIME cryptographic signature
