Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Wietse Venema
10] ([127.0.0.1] helo=[192.168.1.10]) by ASSP-nospam; 25 Sep 2008 11:30:43 +1000 Message-Id: <[EMAIL PROTECTED]> From: James Brown <[EMAIL PROTECTED]> To: Postfix users In-Reply-To: <[EMAIL PROTECTED]> Mime-Version: 1.0 (Apple Message framework v929.2) Subject: Re: [OFF]: D

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Noel Jones
James Brown wrote: On 26/09/2008, at 1:01 AM, Wietse Venema wrote: James Brown: Examining the headers of the email I sent to this list: 1. Received: from [192.168.1.10] ([127.0.0.1] helo=[192.168.1.10]) by ... 3. Received: from mail.bordo.com.au ([127.0.0.1]) by localhost (mail.bor

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread James Brown
On 26/09/2008, at 1:01 AM, Wietse Venema wrote: James Brown: Examining the headers of the email I sent to this list: 1. Received: from [192.168.1.10] ([127.0.0.1] helo=[192.168.1.10]) by ... 3. Received:from mail.bordo.com.au ([127.0.0.1]) by localhost (mail.bordo.com.au [127.0.0.1])

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Wietse Venema
James Brown: > On 25/09/2008, at 11:03 PM, Mark Martinec wrote: > > > James, > > > >> I'll have to work out how to turn off going through amavisd-new next. > > > > amavisd-new is DKIM-clean, it will not break a signature. > > Something else is modifying your Mime-Version header field. > > > > Mar

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread mouss
James Brown wrote: [snip] The Astaro box is doing S/MIME signing and encrypting, but I got the same DKIM failure with it turned off. when you test, make sure "turning off" really mean "it does not pass through". and prove it (in short, look for a proff that it is so. don't trust your interpr

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread James Brown
On 25/09/2008, at 11:03 PM, Mark Martinec wrote: James, I'll have to work out how to turn off going through amavisd-new next. amavisd-new is DKIM-clean, it will not break a signature. Something else is modifying your Mime-Version header field. Mark Yes, I thought it must be DKIM-clean, b

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Mark Martinec
James, > I'll have to work out how to turn off going through amavisd-new next. amavisd-new is DKIM-clean, it will not break a signature. Something else is modifying your Mime-Version header field. Mark

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Mark Martinec
James, > I'm sending this reply using Thunderbird rather than Mail.app to see how > the headers differ. > > I've tried sending without going through the ASSP anti-spam proxy to no > avail. Likewise using amavisd-new. Yes, this one is a PASS! It still has two MIME-Version header fields, but unlik

Re: [OFF]: DKIM broken by certain email clients [OT/BAD_HEADER]

2008-09-25 Thread Justin Piszcz
On Thu, 25 Sep 2008, James Brown wrote: Robert Schetterer wrote: > James Brown schrieb: >> Would anyone who checks DKIM sigs on incoming mails mind if I send >> them an email directly? >> >> That way I can make sure it is not just the DKIM reflector that's >> giving false results somehow. >

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Robert Schetterer
James Brown schrieb: Robert Schetterer wrote: James Brown schrieb: Would anyone who checks DKIM sigs on incoming mails mind if I send them an email directly? That way I can make sure it is not just the DKIM reflector that's giving false results somehow. Thanks, James. have you allready

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread James Brown
Robert Schetterer wrote: James Brown schrieb: Would anyone who checks DKIM sigs on incoming mails mind if I send them an email directly? That way I can make sure it is not just the DKIM reflector that's giving false results somehow. Thanks, James. have you allready tried Sender Auth Test

Re: [OFF]: DKIM broken by certain email clients

2008-09-25 Thread Robert Schetterer
James Brown schrieb: Would anyone who checks DKIM sigs on incoming mails mind if I send them an email directly? That way I can make sure it is not just the DKIM reflector that's giving false results somehow. Thanks, James. have you allready tried Sender Auth Test Service [EMAIL PROTECTED]

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread James Brown
On 25/09/2008, at 12:01 AM, Wietse Venema wrote: James Brown: The flow of my email is: Mail.app -> ASSP -> Postfix -> amavisd-new -> Postfix -> Astarto Gateway -> Internet I think :-) Your mail is modified AFTER the DKIM signature is computed. Therefore, the source of the message not break

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread Mark Martinec
On Thursday September 25 2008 02:06:41 James Brown wrote: > Would anyone who checks DKIM sigs on incoming mails mind if I send > them an email directly? > > That way I can make sure it is not just the DKIM reflector that's > giving false results somehow. I wouldn't mind, although the postfix-user

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread James Brown
Would anyone who checks DKIM sigs on incoming mails mind if I send them an email directly? That way I can make sure it is not just the DKIM reflector that's giving false results somehow. Thanks, James. smime.p7s Description: S/MIME cryptographic signature

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread James Brown
On 25/09/2008, at 12:01 AM, Wietse Venema wrote: James Brown: The flow of my email is: Mail.app -> ASSP -> Postfix -> amavisd-new -> Postfix -> Astaro Gateway -> Internet I think :-) Your mail is modified AFTER the DKIM signature is computed. Therefore, the source of the message not breaki

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread Wietse Venema
James Brown: > The flow of my email is: > > Mail.app -> ASSP -> Postfix -> amavisd-new -> Postfix -> Astarto > Gateway -> Internet > > I think :-) Your mail is modified AFTER the DKIM signature is computed. Therefore, the source of the message not breaking the signature. However, you can use

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread Robert Schetterer
ubject: Re: [OFF]: DKIM broken by certain email clients Date: Wed, 24 Sep 2008 17:42:40 +1000 References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="3

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread James Brown
ubject: Re: [OFF]: DKIM broken by certain email clients Date: Wed, 24 Sep 2008 17:42:40 +1000 References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED] > MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7- signature"; micalg=sha1; boundary="3

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread Mark Martinec
Pv7Qj+Cq5EOcwr75ZXv/GV+MRpo+qGiOfv0 fJtqDvR1TwbjuvSuRTHgQVCc1+AY3T4iDEQ5f4EGJ0NPR56rPqrKGDi1AwCGjvVD sieq86AnRWfredZLTHzXvzq5neSGOE= Message-Id: <[EMAIL PROTECTED]> From: James Brown <[EMAIL PROTECTED]> To: postfix-users@postfix.org In-Reply-To: <[EMAIL PROTECTED]> MIME-Version: 1.0 Sub

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread James Brown
On 24/09/2008, at 1:54 PM, Benny Pedersen wrote: On Wed, September 24, 2008 03:05, James Brown wrote: I've just set up DKIM on my mail system (via Astaro Security Gateway). X-Amavis-Alert: BAD HEADER SECTION Duplicate header field: "MIME-Version" Thanks Benny. I'll send my reply using Thund

Re: [OFF]: DKIM broken by certain email clients

2008-09-24 Thread James Brown
On 24/09/2008, at 12:00 PM, Victor Duchovni wrote: On Wed, Sep 24, 2008 at 11:05:21AM +1000, James Brown wrote: I've just set up DKIM on my mail system (via Astaro Security Gateway). If I send an email to [EMAIL PROTECTED] to comes back saying: DKIM check details: Result: fail (signature d

Re: [OFF]: DKIM broken by certain email clients

2008-09-23 Thread Benny Pedersen
On Wed, September 24, 2008 03:05, James Brown wrote: > I've just set up DKIM on my mail system (via Astaro Security Gateway). X-Amavis-Alert: BAD HEADER SECTION Duplicate header field: "MIME-Version" > If I send an email to [EMAIL PROTECTED] to comes back > saying: > > DKIM check details: > Resu

Re: [OFF]: DKIM broken by certain email clients

2008-09-23 Thread Victor Duchovni
On Wed, Sep 24, 2008 at 11:05:21AM +1000, James Brown wrote: > I've just set up DKIM on my mail system (via Astaro Security Gateway). > > If I send an email to [EMAIL PROTECTED] to comes back > saying: > > DKIM check details: > Result: fail (signature doesn't verify) > > The same thing happen