Danjel Jungersen via Postfix-users:
> I see 3 things that worry me about this record:
> *****
>    <record>
>      <row>
>        <source_ip>212.27.12.12</source_ip>
>        <count>2</count>
>        <policy_evaluated>
>          <disposition>none</disposition>
>          <dkim>fail</dkim>
>          <spf>fail</spf>
>        </policy_evaluated>
>      </row>
>      <identifiers>
> <envelope_to>some-real-receiver.tld</envelope_to>
>        <envelope_from>&lt;&gt;</envelope_from>

Could that be a delivery status notification, i.e. an email message
sent with MAIL FROM:<>, the null sender address?

>        <header_from>mail.jungersen.dk</header_from>

Postfix sends bounce messages as:

    From: Mail Delivery System <MAILER-DAEMON@$myorigin>

You have:

    myorigin = /etc/mailname

You may want to look there.

> 3)
> It seems like these mails have not been dkim signed, or am I reading it 
> wrong?
> If I'm not wrong, what do I do to correct it?

DKIM signing of Postfix-generated mail depends on the settings for
non_smtpd_milters and internal_mail_filter_classes. On my mail
server, MAILER-DAEMON messasges are DKIM signed. But I have:

    internal_mail_filter_classes = bounce

which is not the default; the default pre-dates message signing,
and maybe should be updated, just like the 10MB message size limit
which everyone seems to change when they run into it.

        Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to