On Mon, Sep 18, 2023 at 10:09:28AM -0400, Curtis Maurand via Postfix-users 
wrote:

> I'm getting a DNS failure on my setup that gmail is not getting.  It's
> a delegated subdomain.  I'm getting this temp error. the relevant
> message header is below.
> 
> Authentication-Results: sirius.xyonet.com;
>       dkim=temperror ("DNS error when getting key") 
> header.d=news.circadian.com header.s=default header.b=KGxjxIVc;
>       spf=temperror (sirius.xyonet.com: error in processing during lookup 
> ofxyo...@news.circadian.com: DNS 
> error)smtp.mailfrom=xyo...@news.circadian.com;
>       dmarc=temperror reason="query refused" header.from=circadian.com 
> (policy=temperror)

Test your DNS resolver.  You should be seeing something like the below,
but perhaps the authoritative servers don't like your resolver, or
something between you and them is mangling the request or response.

    $ dig +nocmd +nostats +nocl +nottl +nosplit -t txt 
default._domainkey.news.circadian.com
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51029
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 1400
    ;; QUESTION SECTION:
    ;default._domainkey.news.circadian.com. IN TXT

    ;; ANSWER SECTION:
    default._domainkey.news.circadian.com. TXT "v=DKIM1; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCp3xxpkLE6h08ejabeWf1ZS+91bssPN7UAwX7R2iF8IRoSoTVibOJVnYqIQf+5xTvBUxpAhThwzefqRmdyUYBeNCcPVSQ8yhYrw6ygU5q10RUx1OT2rkZFh/FTN0cBIlctGOq+nS/efsYY5fKQHt5MQQhvHKetyWoTYw2QPhk1KwIDAQAB;"

    ---

    $ dig +nocmd +nostats +nocl +nottl +nosplit -t txt  
_dmarc.news.circadian.com
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 571
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 1400
    ;; QUESTION SECTION:
    ;_dmarc.news.circadian.com. IN TXT

    ;; ANSWER SECTION:
    _dmarc.news.circadian.com. TXT  "v=DMARC1; p=quarantine; adkim=s; aspf=s"

-- 
    Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to