This is an example. Emails from this legitimate IT supplier in the UK always get blocked by my install of ASSP. I have 60 examples collected over the last two weeks. I have also checked and there are over 11,300 emails containing the phrase DKIM
X-Assp-Version: 2.2.2(12151) on mail.smtphost.co.uk X-Assp-Server-TLS: yes X-Assp-Delay: not delayed (whitelisted); 12 Jun 2012 10:37:36 +0100 X-Assp-Message-Score: 100 (blacklisted domain 'DKIM') X-Assp-IP-Score: 100 (blacklisted domain 'DKIM') X-Assp-Whitelisted: Yes X-Assp-Tag: BlackDomain X-Assp-ID: mail.smtphost.co.uk m1-93856-09671 X-Assp-Envelope-From: [email protected] X-Assp-Intended-For: [email protected] X-Assp-Original-Subject: Accessorise with Westcoast X-Spam-Status:yes X-Assp-Spam-Reason: blacklisted domain 'DKIM' X-Assp-Message-Totalscore: 100 Received: from mta8524.pur3.net ([94.236.85.24] helo=mta8524.pur3.net) by mail.smtphost.co.uk with SMTP (2.2.2); 12 Jun 2012 10:37:36 +0100 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=ukrs394972; d=pur3.net; h=Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:From:Reply-To:To:Date:Message-ID; bh=qDnGuldX6e33EFO2mLq0ndsnRZw=; b=e0vZrBkc3kZSoDcHhSXBeODToVaw/kOsTzYm7nSIQyVWGSuqHjvOIHzOPFCfVvZZ3fwQGMLGAin3 tQM9n4YtMnpVwSWqAv1mZdLPYiOA6usvc7QpdzG75FDzOJMmsfTn Received: from localhost (127.0.0.1) by mta8524.pur3.net id hqs6t81549ol for <[email protected]>; Tue, 12 Jun 2012 10:36:23 +0100 (envelope-from <[email protected]>) Subject: Accessorise with Westcoast MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="alternative_e8fdd7febb9516edbb8263eba85635ea" Content-Transfer-Encoding: 7bit From: "Westcoast" <[email protected]> Reply-To: "Westcoast" <[email protected]> X-MailId: {~B91786242557490729941024540407~} To: [email protected] Date: Tue, 12 Jun 2012 10:36:23 +0100 Message-ID: <[email protected]> On 15/06/2012 06:19, Thomas Eckardt wrote: > Colin, please post such a header. > > Thomas > > > > Von: Colin<[email protected]> > An: ASSP development mailing list<[email protected]>, > Datum: 14.06.2012 23:25 > Betreff: [Assp-test] blacklisted domain 'DKIM' > > > > Hey there, > > I've been meaning to say something about this for a while. I quite > regularly get messaged blocked where the reason is given as: > > blacklisted domain 'DKIM' > > Thing is, there is nothing in the blackdomains.txt file that would cause > DKIM to be blocked at least as far as I can see. It is mostly plain text > email addresses with a couple of wildcards that don't even come close. > > Is there a chance that something in the code that is incorrectly > detecting the DKIM header as a domain to be blocked? > > All the best, > Colin Waring > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > > > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
