Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-06-03 00:34: If you mean the DKIM record, which one? It has quite a few. Authentication-Results mx.junc.eu (amavisd-new); dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=iecc.com header.b="paysHkcv"; dkim=fail (2048-bit key) r

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Mark Alley via mailop
Apologies, typo correction - *"/MX address record limitation as *10 *A lookups/ /instead of 1/" On 6/2/2023 5:45 PM, Mark Alley wrote: You'll find that several validators are somewhat liberal with interpretation of RFC logic and the ABNFs. So, it's not really too surprising. For example, M

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Mark Alley via mailop
You'll find that several validators are somewhat liberal with interpretation of RFC logic and the ABNFs. So, it's not really too surprising. For example, MXToolbox's SPF validator (until very recently, it seems they have since fixed it) used to count the number of IP addresses resolved from t

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread John Levine via mailop
It appears that Gellner, Oliver via mailop said: > >The DKIM record of John Levines domain is reported as invalid too, while you >should think that he knows his way around DKIM. So in the end this Google tool >might in fact be buggy. If you mean the DMARC record for johnlevine.com, it's valid,

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Gellner, Oliver via mailop
> On 02.06.2023 at 10:22 Johan Lavsund via mailop wrote: > Hi Oliver, > > Can you try adding a ; to the end of the dns record? > On 02.06.2023 at 10:23 Taavi Eomäe via mailop wrote: > > Your DKIM TXT record seems valid, but does not specify the key type, looking > at the length it should prob

Re: [mailop] SRS? Was Noticed Google now suggests changing envelope sender for forwarding

2023-06-02 Thread Alessandro Vesely via mailop
On Fri 02/Jun/2023 02:14:50 +0200 Brandon Long via mailop wrote: On Thu, Jun 1, 2023 at 11:20 AM Alessandro Vesely via mailop.org wrote: On Thu 01/Jun/2023 17:45:38 +0200 Robert L Mathews wrote: So I guess it's time to add SRS rewriting for Gmail addresses...! The only points I see in SRS ar

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Slavko via mailop
Dňa 2. júna 2023 10:32:02 UTC používateľ Benny Pedersen via mailop napísal: >this is only needed if defaults is not ok, so it follows what is with dmarc >where all is optional Are you sure? AFAIK the v= and p= are required by RFC 7489, sect. 6.3. With exception for p= in case of rua= only reco

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Taavi Eomäe via mailop
> this is only needed if defaults is not ok, so it follows what is with dmarc where all is optional According to the standard, yes, judging by at least this one tool complaining, ehh... I think applying the robustness principle of being conservative in what you do and being liberal in what y

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Benny Pedersen via mailop
Taavi Eomäe via mailop skrev den 2023-06-02 10:23: Your DKIM TXT record seems valid, but does not specify the key type, looking at the length it should probably contain "k=rsa". Or they might not like you specifying acceptable hash algorithms. this is only needed if defaults is not ok, so it fo

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Benny Pedersen via mailop
Gellner, Oliver via mailop skrev den 2023-06-02 09:45: Hello, the Google admin toolbox claims our DKIM keys and MTA-STS entries are invalid. Example: https://toolbox.googleapps.com/apps/checkmx/check?domain=dm.de&dkim_selector=dmglobal4 reports "Invalid format of DKIM record" what errors http

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Taavi Eomäe via mailop
Your DKIM TXT record seems valid, but does not specify the key type, looking at the length it should probably contain "k=rsa". Or they might not like you specifying acceptable hash algorithms. Your mta-sts.txt does not have a trailing newline, I'm not sure if the standard mandates it, but that

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Johan Lavsund via mailop
Hi Oliver, Can you try adding a ; to the end of the dns record? Like: v=STSv1; id=202203071353; Kind Regards Johan On 2023-06-02 09:45, Gellner, Oliver via mailop wrote: Hello, the Google admin toolbox claims our DKIM keys and MTA-STS entries are invalid. Example: https://toolbox.googleap

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Johan Lavsund via mailop
Hi Oliver, It fails for the DKIM setup on all my domains too, but MTA-STS checks out ok. I looked at your MTA-STS dns record and policy file and can´t see anything wrong. Kind Regards Johan On 2023-06-02 09:45, Gellner, Oliver via mailop wrote: Hello, the Google admin toolbox claims our D

[mailop] Google Toolbox broken?

2023-06-02 Thread Gellner, Oliver via mailop
Hello, the Google admin toolbox claims our DKIM keys and MTA-STS entries are invalid. Example: https://toolbox.googleapps.com/apps/checkmx/check?domain=dm.de&dkim_selector=dmglobal4 reports "Invalid format of DKIM record" and "MTA STS is malformed". I cannot find out what is invalid about them