On Thu, Mar 09, 2023 at 01:21:02PM -0500, postfix--- via Postfix-users <postfix-users@postfix.org> wrote:
> > I am still seeing DKIM fails and two DKIM-Signatures. > > Is this correct? Haven´t seen this with other mails but I cannot rule out a > > config issue on my side. Is someone else observing that? > > Yes there will be two DKIM signatures due to the configuration of the mailing > list. > The first DKIM signature is from the email author to the mailing list. > The second DKIM signature is added by the mailing list when it is resent to > everyone on the list. > > The SPF will pass, because the email is from the list and matches the SPF > records. > The first DKIM signature created by the author will fail because the mailing > list altered the email adding a footer and reply-to headers. > The second DKIM signature will pass because it was signed by the list before > sending to you. > > With the SPF pass, and one DKIM pass, DMARC should pass and the email should > be accepted as legit. That's not exactly right. The DMARC policy of the original sender no longer applies because the From: header address is no longer that of the original sender. The From: header address is now postfix-mum...@postfix.org. If the postfix.com domain had a DMARC policy, then it would apply, but it doesn't have one. There is only SPF and DKIM. But that should suffice unless there are mail providers that annoyingly distrust anything without DMARC. cheers, raf _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
