Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 5648 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Invalid DKIM-Signature

Loganh
Hey all,

I was wondering why my installation of Astaro appears  to be accepting mail from domains which are using invalid  DKIM-Signature.

For instance it accepted mail from this domain.

From funtime@vesseler.info  Sat Oct 30 10:48:11 2010
Return-Path: 
Received: from [69.162.123.138] (port=11580 helo=oci138.vesseler.info)
by *MyServerName* with esmtp (Exim 4.69)
(envelope-from )
id 1PCEb4-00076p-0H
for ***@***.net; Sat, 30 Oct 2010 10:48:08 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=vesseler.info;
 h=Mime-Version:To[:D]ate:Message-ID:Subject:From:Content-Type:Content-Transfer-Encoding; i=funtime@vesseler.info;
 bh=Ggtmjn7qtgDo3DA9bsc0hrrUjvc=;
 b=dSD0xE+FnX0CxA0o3lB7EvqZm+pIQPVQsALB0zADnNxScjy6pKvSVEFNDvWI4OoCxlcdEsFaoLUx
   IRV6rTYdYuuE6dOGqcb6gy+wPqTrO2sB0lL+u/lc7ikOueGE57aLgr1awO5zmhw/nXypzzyiMZTV
   Knyz9UoNO4f0einiLKs=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=vesseler.info;
 b=XVsCbtsnSiJ0KCv+/qiLDMWr1UIve0AhAc0fA6jH8NwRAOZfwh5x1+Ww2jBP/ILX4JHTz+F4r/aM
   Q6YS6KK8BCswh1LfsRTJNA4bGBpHPb5OoaKyKN6P84B0MNjWb7FHuMO7JjJxzb+Nv5HcTXeSRfId
   5TrwTRiDLVReCos9AgU=;
Mime-Version: 1.0
To: 
Date: Sat, 30 Oct 2010 12:35:20 -0400
Message-ID: 
Subject: Employee Travel Incentive Program
From: "Hr. Dept." 
X-Mailer: 423949_E6744163440329


This thread was automatically locked due to age.
Parents
  • 0
    Hi, Loganh, and welcome to the User BB!

    It looks like the vesseler.info MTA signs the emails, but their authoritative public name server has neither the "_domainkey" policy record nor the selector record specified in the signature (default._domainkey.vesseler.inf).  In case of a failure like that, I think the evaluating process is supposed to treat the message as unsigned.

    Cheers - Bob
    PS On the KnowledgeBase, there's a great DKIM Setup Guide.  If you don't want to use the Astaro command line, consult a different article, DKIM Setup using Windows OpenSSL.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Bob,

    I have already configured my Astaro to sign my outbound mail, and it works perfectly.

    I was just interested in finding out why mail is passing that appears to be signed but can not be verified.

    Is there a way from command line that this behavior can be changed, as all mail that makes it passed this stage turns out to be spam. that is not being blocked by Astaro
Reply
  • 0 in reply to BAlfson
    Bob,

    I have already configured my Astaro to sign my outbound mail, and it works perfectly.

    I was just interested in finding out why mail is passing that appears to be signed but can not be verified.

    Is there a way from command line that this behavior can be changed, as all mail that makes it passed this stage turns out to be spam. that is not being blocked by Astaro
Children
No Data
Cookie Information Banner