>Number: 187605
>Category: misc
>Synopsis: FreeBSD mailing lists break DKIM
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible:freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Sat Mar 15 11:50:00 UTC 2014
>Closed-Date:
>Last-Modified:
>Originator: Reko Turja
>Release:
>Organization:
>Environment:
>Description:
When forwarding mail, FreeBSD mailing lists keep DKIM headers intact like
example below and the Authentication results in "verification failed" due DKIM
signing belonging to original sender, not freebsd.org.
Return-Path:
Received: from cerebro.liukuma.net ([unix socket])
by mail.liukuma.net (Cyrus v2.4.17) with LMTPA;
Sat, 15 Mar 2014 10:11:33 +0200
X-Sieve: CMU Sieve 2.4
Received: from cerebro.liukuma.net (localhost [127.0.0.1])
by cerebro.liukuma.net (Postfix) with ESMTP id 65ED88A0123
for ; Sat, 15 Mar 2014 10:11:33 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.8.3 cerebro.liukuma.net 65ED88A0123
Authentication-Results: cerebro.liukuma.net; dkim=fail
reason="verification failed"
header.d=rocketmail.com header.i=@rocketmail.com header.b=jViIpzjQ;
dkim-adsp=none
X-Virus-Scanned: amavisd-new at liukuma.net
X-Spam-Flag: NO
X-Spam-Score: -1.302
X-Spam-Level:
X-Spam-Status: No, score=-1.302 tagged_above=-25 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1,
FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001,
HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_PASS=-0.001,
T_DKIM_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01]
autolearn=no autolearn_force=no
Received: from cerebro.liukuma.net ([127.0.0.1])
by cerebro.liukuma.net (cerebro.liukuma.net [127.0.0.1]) (amavisd-new,
port 10026)
with ESMTP id fcz6-Vbu9N_t for ;
Sat, 15 Mar 2014 10:11:28 +0200 (EET)
Received: from mx2.freebsd.org (mx2.freebsd.org
[IPv6:2001:1900:2254:206a::19:2])
by cerebro.liukuma.net (Postfix) with ESMTP id 8B4688A0122
for ; Sat, 15 Mar 2014 10:11:27 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.8.3 cerebro.liukuma.net 8B4688A0122
Received: from hub.freebsd.org (hub.freebsd.org
[IPv6:2001:1900:2254:206c::16:88])
(using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
(No client certificate requested)
by mx2.freebsd.org (Postfix) with ESMTPS id 19D0A2F3B;
Sat, 15 Mar 2014 08:11:25 + (UTC)
Received: from hub.freebsd.org (hub.freebsd.org
[IPv6:2001:1900:2254:206c::16:88])
by hub.freebsd.org (Postfix) with ESMTP id AAFBA130;
Sat, 15 Mar 2014 08:11:24 + (UTC)
Delivered-To: freebsd-questi...@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
[IPv6:2001:1900:2254:206a::19:1])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by hub.freebsd.org (Postfix) with ESMTPS id 43C4A106
for ; Sat, 15 Mar 2014 08:11:21 + (UTC)
Received: from nm2-vm5.bullet.mail.ne1.yahoo.com
(nm2-vm5.bullet.mail.ne1.yahoo.com [98.138.91.224])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx1.freebsd.org (Postfix) with ESMTPS id D9FE7CC9
for ; Sat, 15 Mar 2014 08:11:20 + (UTC)
Received: from [98.138.226.176] by nm2.bullet.mail.ne1.yahoo.com with NNFMP;
15 Mar 2014 08:09:01 -
Received: from [98.138.226.125] by tm11.bullet.mail.ne1.yahoo.com with NNFMP;
15 Mar 2014 08:09:01 -
Received: from [127.0.0.1] by smtp204.mail.ne1.yahoo.com with NNFMP;
15 Mar 2014 08:09:01 -
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s1024;
t=1394870941; bh=pc+8wSOgxk5p+aBeQiTsrjxeptUVariVh7J2yamGCtI=;
h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Date:From:To:Subject:Message-Id:In-Reply-To:References:X-Mailer:Mime-Version:Content-Type:Content-Transfer-Encoding;
b=jViIpzjQGCz4Mn5wyxsyOSa/D88lmpnEqUXvXpAn+fn3w5E6HXS2QLxPrPAgRy4glsTAHlzInukpu+tNK2JFgavBBIdEHwwn+nRmXqT03HW2f4ZOarieLLutt1/UXWwAH4N77GKqGVTG4DINR5m1k1Tdp3Zx3n4elnwCOg2Juic=
X-Yahoo-Newman-Id: 840732.4100...@smtp204.mail.ne1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: ynyJGnIVM1mb9dlr7R_1FkzEPEiFdMcbCRLGHzrjwmKJB1m
CldggFSmSrBh_vaM1i3uxhBWylOuOm4GajJa730rcvLR3iYAcz2gWBPQAHKy
Bae0amQzDICgARBgpmXboTwJZzFTnr0COelcoVZ08LNtPC3HyZcR8lR1Fuco
Ng9unot2CF6lE3ZDR6Z2PRUhqf0dwMRl98r4tZOozTnKOHvNaeR4h5sGpd7d
7ee5yivv5HqYOcpHgaTqdDJNmbqy16.LCBhvYinb59OTpzfL_Kqq.W0L0o1i
9Cxpzfd9ifqsFyOR6EV3Rxk.Riy7zzwY21wCb0gBdhpooMpA7F_FDTBUTPBV
xkhEd8YicwkM70Wvc0QFmqVVP_bCR5kKMAI2EfgIBlusCjBdgScTbGG7II6T
GE64K4YGMSwRl6RbYhuScLhrQEgZOle7qqIVrsCx5NnaSrdUdWvJVt1nCMuT
g8OwTWwW5nSU4oCGYtxdZa5mSC4k2cKRuF6HoRJDkz4agBnjwCCBBSYwoXLs
6iJGpOiF_V89J7jNLvObCh6tsX5Axi0A58HCViF58irLoqV98e6l6.2PotD1
iOf84lxodpcX8Qf21F4e8HYrqpTtq2K3TljoLI62II1THWYZCPk5ljgvbIh7
S1mW52XXhZH76chrU5pMuIS8