On Thu, 10 Aug 2017 15:12:11 +0100, Felix Defrance <fe...@d2france.fr>
wrote:
In the first lines on log, you could see opendkim results are success.
Aug 9 10:25:42 vmail opendkim[21923]: 0D81A778B1D: DKIM verification
successful
Aug 9 10:25:43 vmail opendmarc[7879]: 0D81A778B1D: groupeastek.fr none
That why I think Amavis or Spamassassin is in cause.
If you read the limitations section regarding milters in postfix
http://www.postfix.org/MILTER_README.html#limitations you'll see that if
you call both a milter and a before-queue content scanner they can't both
process the full untampered with message (as RW has mentioned).
I forget the exact details, it's a long time since I had to look into it,
but if you skip opendkim and opendmarc you should find that the DKIM check
in SpamAssassin succeeds.
Microsoft is helpful, but they should be not..
When companies sign up to use Microsoft email it is sent out signed using
a domain MS control. It seems to work well for them and apparently makes
it user friendly. I see a lot of ham that is DKIM invalid but I don't
recall the last time it was from a Microsoft account. (That's probably
tempting fate.)
