Hi Benny, Yes, our outgoing emails are signed and validate properly. The incoming email DKIM signature validation is our current issue.
Thanks, Ken > On May 9, 2025, at 10:17 AM, Benny Pedersen via Postfix-users > <postfix-users@postfix.org> wrote: > > Matus UHLAR - fantomas via Postfix-users skrev den 2025-05-09 16:18: >> On 09.05.25 08:14, Ken Biggs via Postfix-users wrote: >>> Looking at the maillog, I notice policyd-spf is running before opendkim. >>> Could that be modifying the email before dkim validation? >> it should not. >> I use pyspf-milter which is from the same package I believe (python, there's >> also perl version policyd-spf) and it only accepts/rejects e-mail and adds >> Authentication-Results: header. >> in my case, both opendkim and spamassassin's DKIM test often claim correct >> results. >> Question: aren't those mails failing DKIM from mailing lists? >> Because that is quite often case where DKIM does not pass. > > your mail gives this result here > > No, score=-6.298 tagged_above=-999 required=5 tests=[AUTHRES_ARC_NONE=-0.5, > AUTHRES_DKIM_PASS=-0.5, AUTHRES_DMARC_PASS=-1.5, DKIM_SIGNED=0.1, > DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, > MAILING_LIST_MULTI=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-2.999, > RCVD_IN_MSPIKE_WL=0.001, RELAYCOUNTRY_BAD_DE=0.5, RELAYCOUNTRY_BAD_SK=1.5, > SPF_HELO_PASS=-0.1, SPF_PASS=-0.1] autolearn=no autolearn_force=no > > thanks to sys4.de :) > _______________________________________________ > Postfix-users mailing list -- postfix-users@postfix.org > To unsubscribe send an email to postfix-users-le...@postfix.org _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
