On Sun, Oct 05, 2014 at 07:30:20PM +0300, Inteq Solution - Dep. tehnic wrote:
> No security appliance in front of Postifix.
> I use SpamAssassin that tags with X-Spam.
>
> I have disabled AV scanning. No luck
> I have disabled dkim-milter. No luck
>
> Weird thing is that from other dmarc enabled domains, the result is pass and
> email delivery is OK.
> Only from yahoo.com I have this problem.
You need to capture an unmodified complete message that fails
validation, with full headers. Do that at the receiving gateway
if possible by putting such a message on "HOLD". Then post at
least the headers. Perhaps the DKIM signature specifies headers
that were modified in transit.
A command-line DKIM verifier that gives more verbose output may be
useful.
--
Viktor.
