On 09.05.25 08:14, Ken Biggs via Postfix-users wrote:
Looking at the maillog, I notice policyd-spf is running before opendkim. Could
that be modifying the email before dkim validation?
it should not.
I use pyspf-milter which is from the same package I believe (python, there's
also perl version policyd-spf) and it only accepts/rejects e-mail and adds
Authentication-Results: header.
in my case, both opendkim and spamassassin's DKIM test often claim correct
results.
Question: aren't those mails failing DKIM from mailing lists?
Because that is quite often case where DKIM does not pass.
On May 9, 2025, at 8:04 AM, Ken Biggs via Postfix-users
<postfix-users@postfix.org> wrote:
I'm running spamass-milter.
/etc/mail/spamassassin/v312.pre already has loadplugin
Mail::SpamAssassin::Plugin::DKIM.
Not seeing AuthRes anywhere in /etc/mail/spamassassin.
So, I'm assuming the X-Spam-Status: tests=DKIM_INVALID,DKIM_SIGNED are SpamAssassin's
agreement with OpenDKIM's Authentication-Results: dkim=fail reason="signature
verification failed". I haven't seen any conflict between the dkim validation
results so far.
It's great to know Matus is using the same combination and not seeing frequent
DKIM failures, so it's my setup somehow.
I'm not using smtp proxy and I don't believe I have any content filter set up.
I've tried running opendkim as the only milter (commenting out opendmarc and
spamassassin). There were no changes to validation results.
k
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Posli tento mail 100 svojim znamim - nech vidia aky si idiot
Send this email to 100 your friends - let them see what an idiot you are
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
