* Rolf E. Sonneveld <r.e.sonnev...@sonnection.nl>: > >I was able to work around the delivery problems by stripping the DKIM > >headers on outgoing mails (as so often). > > Do you mean a Cisco ASA/PIX firewall with 'smtp protocol fixup' > effectively blocks _any_ message carrying a DKIM-signature header?
No, it's blocking SOME, but in order to make those pass, I had to strip off the DKIM Headers, and suddenly they would go through: smtp_header_checks=pcre:/etc/postfix/no_dkim.pcre /^DKIM-Signature:/ IGNORE # this strips a DKIM Signature > I've always wondered why they call it 'smtp protocol fixup', they'd > better call it 'smtp protocol breakdown'. One really has to wonder about this. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de
