On 1/4/24 06:31, Matus UHLAR - fantomas wrote:
On 03.01.24 19:30, Thomas Cameron wrote:
Thanks for the advice on SRS - I have set it up and it's mostly
working. At least GMail accepts the emails, although it seems to be
failing DKIM and DMARC tests. I'm digging into what, if anything, can
be done to make PostSRSd fix this issue.
DKIM fails if the message is modified in your server (or, if DKIM failed
already when it came to it)
DMARC fails if neither DKIM nor SPF succeed, where DKIM signature or the
SPF record must be from the domain in From:
When you forward e-mail, SRS makes sure SPF record is from your domain,
but the DKIM signature must be made by sending server, so forwarded
messages without valid DKIM signature will not pass.
The weird thing is, after a little while, everything seems to be working
just fine. When I send an email to one of the aliases on the server, it
sends it to the "real" email address at GMail. It now passes SPF, DMARC,
and DKIM tests. Looking in the headers on GMail, I see both DKIM
signatures, from the server which sent the original email, and the one
on our mail server.
I have no idea why GMail was saying it didn't pass checks earlier. I saw
the same DKIM signatures in the headers before.
Anyway, SRS is very cool, and I appreciate all the folks who pointed me
to it.
--
Thanks for the advice, Matus!
Thomas
