Re: DKIM signing problem

2011-09-21 Thread alex
On 09/19/2011 05:50 PM, Steve Jenkins wrote: On Sun, Sep 18, 2011 at 11:14 PM, Murray S. Kucherawy wrote: I suggest trying again with OpenDKIM (http://www.opendkim.org). The dkim-milter package has been unmaintained for a couple of years now. It lives on under the new name, with lots of bu

Re: DKIM signing problem

2011-09-19 Thread Steve Jenkins
On Sun, Sep 18, 2011 at 11:14 PM, Murray S. Kucherawy wrote: > I suggest trying again with OpenDKIM (http://www.opendkim.org).  The > dkim-milter package has been unmaintained for a couple of years now.  It > lives on under the new name, with lots of bug fixes and new features since > dkim-mil

RE: DKIM signing problem

2011-09-18 Thread Murray S. Kucherawy
Wietse's advice is the first thing I would try: Eliminate anything that modifies your message after signing. The most common signature failure in our analysis apart from DNS setup problems has been a message that was malformed in the first place, so when it gets "fixed" someplace downstream, th

Re: DKIM signing problem

2011-09-18 Thread Wietse Venema
alex: > On 09/18/2011 07:41 PM, Wietse Venema wrote: > > alex: > >> On 09/17/2011 10:34 PM, Patrick Ben Koetter wrote: > >>> * alex: > Hi > > I have a problem with messages signed by my server. All messages > send from any email client(tb, webmail) , fail verification with : > >

Re: DKIM signing problem

2011-09-18 Thread alex
On 09/18/2011 07:41 PM, Wietse Venema wrote: alex: On 09/17/2011 10:34 PM, Patrick Ben Koetter wrote: * alex: Hi I have a problem with messages signed by my server. All messages send from any email client(tb, webmail) , fail verification with : dkim=softfail (fail, message has been al

Re: DKIM signing problem

2011-09-18 Thread alex
On 09/18/2011 07:39 PM, Benny Pedersen wrote: On Sun, 18 Sep 2011 09:29:53 +0300, alex wrote: I'am not speaking about this server. so this server is a key helper to solve the one that does not work ?, i hope The server that doesn't work has nothing to do with the server I use to send this m

Re: DKIM signing problem

2011-09-18 Thread Wietse Venema
alex: > On 09/17/2011 10:34 PM, Patrick Ben Koetter wrote: > > * alex: > >> Hi > >> > >> I have a problem with messages signed by my server. All messages > >> send from any email client(tb, webmail) , fail verification with : > >>dkim=softfail (fail, message has been altered) > >> except messag

Re: DKIM signing problem

2011-09-18 Thread Benny Pedersen
On Sun, 18 Sep 2011 09:29:53 +0300, alex wrote: I'am not speaking about this server. so this server is a key helper to solve the one that does not work ?, i hope

Re: DKIM signing problem

2011-09-18 Thread Ralf Hildebrandt
* alex : > On 09/18/2011 12:52 PM, Ralf Hildebrandt wrote: > >* alex: > > > >>header_checks = pcre:/etc/postfix/maps/anonymization_sender.pcre > > > >What does that do (e.g. alter the message?) > > > with both header_checks and body_checks commented same results (I > also think about that two direc

Re: DKIM signing problem

2011-09-18 Thread alex
On 09/18/2011 12:52 PM, Ralf Hildebrandt wrote: * alex: header_checks = pcre:/etc/postfix/maps/anonymization_sender.pcre What does that do (e.g. alter the message?) with both header_checks and body_checks commented same results (I also think about that two directives)

Re: DKIM signing problem

2011-09-18 Thread Ralf Hildebrandt
* alex : > header_checks = pcre:/etc/postfix/maps/anonymization_sender.pcre What does that do (e.g. alter the message?) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +4

Re: DKIM signing problem

2011-09-17 Thread alex
On 09/17/2011 10:34 PM, Patrick Ben Koetter wrote: * alex: Hi I have a problem with messages signed by my server. All messages send from any email client(tb, webmail) , fail verification with : dkim=softfail (fail, message has been altered) except messages send from command line (telnet

Re: DKIM signing problem

2011-09-17 Thread alex
On 09/18/2011 12:50 AM, Benny Pedersen wrote: On Sat, 17 Sep 2011 22:10:13 +0300, alex wrote: Software use is: centos 6 (x86_64), postfix 2.8.0/2.8.5, dkim-milter-2.8.3-8.el6.x86_64, no content filtering. I can't find anything in my config that could modify the body of the message after is sign

Re: DKIM signing problem

2011-09-17 Thread Benny Pedersen
On Sat, 17 Sep 2011 21:34:47 +0200, Patrick Ben Koetter wrote: Show 'postconf -n' and the mail processing chain. We need to know all components that might alter an outgoing message. outgoing msgs is okay, its imho just signed to self that is modified after signing, else i would not see pass i

Re: DKIM signing problem

2011-09-17 Thread Benny Pedersen
On Sat, 17 Sep 2011 22:10:13 +0300, alex wrote: Software use is: centos 6 (x86_64), postfix 2.8.0/2.8.5, dkim-milter-2.8.3-8.el6.x86_64, no content filtering. I can't find anything in my config that could modify the body of the message after is signed. Authentication-Results: localhost.junc.or

Re: DKIM signing problem

2011-09-17 Thread alex
On 09/17/2011 10:34 PM, Patrick Ben Koetter wrote: * alex: Hi I have a problem with messages signed by my server. All messages send from any email client(tb, webmail) , fail verification with : dkim=softfail (fail, message has been altered) except messages send from command line (telnet

Re: DKIM signing problem

2011-09-17 Thread Patrick Ben Koetter
* alex : > Hi > > I have a problem with messages signed by my server. All messages > send from any email client(tb, webmail) , fail verification with : > dkim=softfail (fail, message has been altered) > except messages send from command line (telnet, sendmail). > > Software use is: centos 6