Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 312 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

More DKIM Brokenness - Encapsulated Mail Messages Being Processed

ChrisKnight

Hi All,

Just an FYI that it's still not worth using DKIM on SFOS 18.0.4 MR4 - just spent a couple of hours debugging an XG throwing '550 No acceptable DKIM signature found.' errors only to find that the messages it was failing on were MIME multipart messages, where one of the parts was an .eml attachment and DKIM was trying to perform signature matches on this attachment. Remove the attachment and it worked.

Workaround is to zip any e-mail attachments before sending them through the XG, set an exception for DKIM scanning in the Mail policies, or bypass the XG mail processing by creating a rule before the SMTP scanning rule that doesn't perform SMTP scanning and allows the internal mail server(s) to send out directly to external mail servers.



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    This issue could be related to the internal ID NC-67605. 

    The fix for this issue(NC-67605) is tentatively planned to be included in the v18 MR5 release. However, there's a patch available, and I would suggest you open a support case at support.sophos.com and PM me the case number so I could add an internal note to your case. 

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    This issue could be related to the internal ID NC-67605. 

    The fix for this issue(NC-67605) is tentatively planned to be included in the v18 MR5 release. However, there's a patch available, and I would suggest you open a support case at support.sophos.com and PM me the case number so I could add an internal note to your case. 

    Thanks,

Children
No Data