Re: many domains fail dkim sig check

[Wietse Venema]

Robert Schetterer:
[ Charset windows-1252 converted... ]
> Am 12.10.2014 um 15:23 schrieb Wietse Venema:
> > Robert Schetterer:
> >> double check your dmarc milter setup, it s very tricky with postfix,
> >> make sure mail is not altered on its way ( which might brake dkim )
> > 
> > I agree that changing a message breaks its DKIM signature, but I
> > why this is "tricky" with Postfix. 
> 
> not dkim, dmarc !
> 
> http://mail-archives.engardelinux.org/modules/index/list_archives.cgi?list=postfix-users&page=0457.html&month=2014-04

Do you want to have the PREPEND headers AFTER the Received: header?

        Wietse

*** ./smtpd.c-  2014-10-08 17:46:49.000000000 -0400
--- ./smtpd.c   2014-10-12 15:54:23.000000000 -0400
***************
*** 3115,3127 ****
      }
  
      /*
-      * PREPEND message headers.
-      */
-     if (state->prepend)
-       for (cpp = state->prepend->argv; *cpp; cpp++)
-           out_fprintf(out_stream, REC_TYPE_NORM, "%s", *cpp);
- 
-     /*
       * Suppress our own Received: header in the unlikely case that we are an
       * intermediate proxy.
       */
--- 3115,3120 ----
***************
*** 3210,3215 ****
--- 3203,3216 ----
                    "\t(envelope-from %s)", STR(state->buffer));
  #endif
      }
+ 
+     /*
+      * PREPEND message headers.
+      */
+     if (state->prepend)
+       for (cpp = state->prepend->argv; *cpp; cpp++)
+           out_fprintf(out_stream, REC_TYPE_NORM, "%s", *cpp);
+ 
      smtpd_chat_reply(state, "354 End data with <CR><LF>.<CR><LF>");
      state->where = SMTPD_AFTER_DATA;