>From: David B Funk <dbf...@engineering.uiowa.edu> >> On Mon, 8 May 2017, Chris wrote: >>
>I'd be concerned with what caused the DKIM signature to fail validation. >(DKIM_SIGNED, T_DKIM_INVALID). >If something in the mail chain is breaking DKIM validation then attempts to >use >things like whitelist_auth are doomed to failure. I'm with David F. on this one. I checked my headers today on a US-CERT email I just received and my SA hit USER_IN_DKIM_WHITELIST and USER_IN_SPF_WHITELIST. There may be some odd interaction on the OP's integration with SA that is altering the body causing the T_DKIM_INVALID hit. Chris, how are you launching SA on your mail server? It looks like the body has been altered to add a warning at the top with a "Content preview:". https://pastebin.com/f71A2FfW Dave