On 11/30/10 11:00 PM, Fabrizio Regalli wrote: > Il giorno mar, 30/11/2010 alle 22.18 +0100, Fabrizio Regalli ha scritto: >> Hello. >> >> I' ve installed DKIM on debian lenny. >> Installation and configuration goes fine but each test fails. >> >> This is last result from port25.com: >> >> >> SPF check: pass >> DomainKeys check: neutral >> DKIM check: temperror >> Sender-ID check: pass >> SpamAssassin check: ham >> >> As you can see it tells "neutral" and "temperror" but I don't understand >> why. >> If I try with "dig" command the result is like excepted: >> >> :$ host -t txt mail._domainkey.mailsicura.org. >> mail._domainkey.mailsicura.org descriptive text "v=DKIM1\; g=*\; k=rsa\; >> t=y\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDByWhTDW2ylR >> +twT5v6gXeK4GTkeKHycYapUxvdV2QL83IoYFUixEZ30fyLKkpkrfvHoJyQDAefy58b2VtJbWDZLXLn3wNDxRLx6LAX5a2Lyc/eMGnkd3QEpqIf+wrsPePkDW45RncuxjUMI6wgMUh3seyW5NIYOJC+GjoEfsKewIDAQAB" >> >> My /etc/dkim-filter.conf looks like >> >> Syslog yes >> LogWhy yes >> UMask 002 >> AutoRestart yes >> AutoRestartRate 10/1h >> Background yes >> Canonicalization simple >> DNSTimeout 5 >> Mode sv >> SignatureAlgorithm rsa-sha256 >> SubDomains no >> #ADSPDiscard no >> #Version rfc4871 >> X-Header no >> KeyList /etc/dkim-keys.conf >> >> and my /etc/dkim-keys.conf looks like >> >> *[email protected]:mailsicura.org:/etc/dkim/keys/mailsicura.org/mail. >> >> and in /etc/dkim/keys/mailsicura.org/mail. there is the private key. >> The folder permissions seems to be ok (dkim-filter:dkim-filter) >> >> >> Could someone please give me a suggest on what I missed? >> >> Thanks. >> Regards. >> >> Fabrizio >> >> > > Hi again, > > I changed "Canonicalization" values from simple to relaxed/relaxed but > unfortunately nothing changed. > Gmail says: > > ... > Authentication-Results: mx.google.com; spf=pass (google.com: domain of > [email protected] designates 89.96.231.236 as permitted sender) > [email protected]; dkim=neutral (bad format) > [email protected] > > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailsicura.org; > s=mail.; t=1291154324; bh=fo1KM/9iLg4HeVoSh0vyLLUwihXR50d/OPwyIALa+dU=; > h=Subject:From:To:Content-Type:Date:Message-ID:Mime-Version; > b=oZ7dQG3tfa1wQvK4d6PFGYenq+8JUxO1gl1i4Xq > +YQpfhlMOoV04p5LVpPIQI3NgM /1UH06Nx53pkFJS9kMpydUjgse4 > +99qmBPMtXEPLlZjGI7SEl03UKh8WS/Ufy5Wj5v tgaYg9O5nekLNV/2eXpDnEOoPbyadh9l > +/Jf+w3I= > > > and yahoo: > > Authentication-Results: mta1142.mail.sk1.yahoo.com from=mailsicura.org; > domainkeys=neutral (no sig); from=mailsicura.org; dkim=temperror (key > retrieval failed) > > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailsicura.org; > s=mail.; t=1291154324; bh=fo1KM/9iLg4HeVoSh0vyLLUwihXR50d/OPwyIALa+dU=; > h=Subject:From:To:Content-Type:Date:Message-ID:Mime-Version; > b=oZ7dQG3tfa1wQvK4d6PFGYenq+8JUxO1gl1i4Xq > +YQpfhlMOoV04p5LVpPIQI3NgM /1UH06Nx53pkFJS9kMpydUjgse4 > +99qmBPMtXEPLlZjGI7SEl03UKh8WS/Ufy5Wj5v tgaYg9O5nekLNV/2eXpDnEOoPbyadh9l > +/Jf+w3I=
I assume the problem is in the dot within your selector. Using a dot in the selector creates a double-dot in the DNS location where the key has to be stored/retrieved (mail.._domainkey.mailsicura.org is not a valid DNS name). /rolf ------------------------------------------------------------------------------ Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get more eyes on your game by optimizing for Intel(R) Graphics Technology. Get started today with the Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs. http://p.sf.net/sfu/intelisp-dev2dev _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
