On Sun, 2011-07-10 at 16:40 -0400, Michael Scheidell wrote: > On 7/10/11 4:29 PM, Chris wrote: > > 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not > > valid > something is breaking your dkim signature before you get it. > if this is INTERNAL, make sure your split zone dns has your dkim dns > entries. > > google for dkim test email address's. > make sure there isn't something killing your headers. > > (hint: you cannot whitelist_from_dkim if the dkim signature is invalid!) > > >
Michael, when the message originally came in to my home box the test
results were:
No, score=-11.1 required=5.0 tests=AWL=-2.730,BAYES_00=-1.9,
DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,KHOP_RCVD_TRUST=-1.75,
KHOP_SMIME_SIGNED=-3,RCVD_IN_DNSWL_MED=-2.3,RCVD_IN_HOSTKARMA_W=-0.1,
RDNS_NONE=0.793,SPF_PASS=-0.001,UNPARSEABLE_RELAY=0.001 AWL,BAYES_00,
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,KHOP_RCVD_TRUST,KHOP_SMIME_SIGNED,
RCVD_IN_DNSWL_MED,RCVD_IN_HOSTKARMA_W,RDNS_NONE,SPF_PASS,UNPARSEABLE_RELAY
as you can see everything about the dkim signature is valid, however
saving and running 'spamassassin -D -t against the message gives:
No, score=-10.9 required=5.0 tests=AWL=-2.749,BAYES_00=-1.9,
DKIM_SIGNED=0.1,KHOP_RCVD_TRUST=-1.75,KHOP_SMIME_SIGNED=-3,
RCVD_IN_DNSWL_MED=-2.3,RCVD_IN_HOSTKARMA_W=-0.1,RDNS_NONE=0.793,
SPF_PASS=-0.001,T_DKIM_INVALID=0.01,UNPARSEABLE_RELAY=0.001
AWL,BAYES_00,
DKIM_SIGNED,KHOP_RCVD_TRUST,KHOP_SMIME_SIGNED,RCVD_IN_DNSWL_MED,
RCVD_IN_HOSTKARMA_W,RDNS_NONE,SPF_PASS,T_DKIM_INVALID,UNPARSEABLE_RELAY
shows the dkim signature to be invalid. Is there a reason why that would
be? When SA is ran against it a 2nd time then I guess it's failing
verification?
--
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
15:53:59 up 157 days, 21:33, 2 users, load average: 0.59, 0.48, 0.42
signature.asc
Description: This is a digitally signed message part
