>Number:         187605
>Category:       misc
>Synopsis:       FreeBSD mailing lists break DKIM
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sat Mar 15 11:50:00 UTC 2014
>Closed-Date:
>Last-Modified:
>Originator:     Reko Turja
>Release:        
>Organization:
>Environment:
>Description:
When forwarding mail, FreeBSD mailing lists keep DKIM headers intact like 
example below and the Authentication results in "verification failed" due DKIM 
signing belonging to original sender, not freebsd.org.

Return-Path: <[email protected]>
Received: from cerebro.liukuma.net ([unix socket])
         by mail.liukuma.net (Cyrus v2.4.17) with LMTPA;
         Sat, 15 Mar 2014 10:11:33 +0200
X-Sieve: CMU Sieve 2.4
Received: from cerebro.liukuma.net (localhost [127.0.0.1])
        by cerebro.liukuma.net (Postfix) with ESMTP id 65ED88A0123
        for <[email protected]>; Sat, 15 Mar 2014 10:11:33 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.8.3 cerebro.liukuma.net 65ED88A0123
Authentication-Results: cerebro.liukuma.net; dkim=fail
        reason="verification failed"
        header.d=rocketmail.com [email protected] header.b=jViIpzjQ;
        dkim-adsp=none
X-Virus-Scanned: amavisd-new at liukuma.net
X-Spam-Flag: NO
X-Spam-Score: -1.302
X-Spam-Level:
X-Spam-Status: No, score=-1.302 tagged_above=-25 required=5
        tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1,
        FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001,
        HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_PASS=-0.001,
        T_DKIM_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01]
        autolearn=no autolearn_force=no
Received: from cerebro.liukuma.net ([127.0.0.1])
        by cerebro.liukuma.net (cerebro.liukuma.net [127.0.0.1]) (amavisd-new, 
port 10026)
        with ESMTP id fcz6-Vbu9N_t for <[email protected]>;
        Sat, 15 Mar 2014 10:11:28 +0200 (EET)
Received: from mx2.freebsd.org (mx2.freebsd.org 
[IPv6:2001:1900:2254:206a::19:2])
        by cerebro.liukuma.net (Postfix) with ESMTP id 8B4688A0122
        for <[email protected]>; Sat, 15 Mar 2014 10:11:27 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.8.3 cerebro.liukuma.net 8B4688A0122
Received: from hub.freebsd.org (hub.freebsd.org 
[IPv6:2001:1900:2254:206c::16:88])
        (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
        (No client certificate requested)
        by mx2.freebsd.org (Postfix) with ESMTPS id 19D0A2F3B;
        Sat, 15 Mar 2014 08:11:25 +0000 (UTC)
Received: from hub.freebsd.org (hub.freebsd.org 
[IPv6:2001:1900:2254:206c::16:88])
        by hub.freebsd.org (Postfix) with ESMTP id AAFBA130;
        Sat, 15 Mar 2014 08:11:24 +0000 (UTC)
Delivered-To: [email protected]
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 43C4A106
 for <[email protected]>; Sat, 15 Mar 2014 08:11:21 +0000 (UTC)
Received: from nm2-vm5.bullet.mail.ne1.yahoo.com
 (nm2-vm5.bullet.mail.ne1.yahoo.com [98.138.91.224])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id D9FE7CC9
 for <[email protected]>; Sat, 15 Mar 2014 08:11:20 +0000 (UTC)
Received: from [98.138.226.176] by nm2.bullet.mail.ne1.yahoo.com with NNFMP;
 15 Mar 2014 08:09:01 -0000
Received: from [98.138.226.125] by tm11.bullet.mail.ne1.yahoo.com with NNFMP;
 15 Mar 2014 08:09:01 -0000
Received: from [127.0.0.1] by smtp204.mail.ne1.yahoo.com with NNFMP;
 15 Mar 2014 08:09:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s1024;
 t=1394870941; bh=pc+8wSOgxk5p+aBeQiTsrjxeptUVariVh7J2yamGCtI=;
 
h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Date:From:To:Subject:Message-Id:In-Reply-To:References:X-Mailer:Mime-Version:Content-Type:Content-Transfer-Encoding;
 
b=jViIpzjQGCz4Mn5wyxsyOSa/D88lmpnEqUXvXpAn+fn3w5E6HXS2QLxPrPAgRy4glsTAHlzInukpu+tNK2JFgavBBIdEHwwn+nRmXqT03HW2f4ZOarieLLutt1/UXWwAH4N77GKqGVTG4DINR5m1k1Tdp3Zx3n4elnwCOg2Juic=
X-Yahoo-Newman-Id: [email protected]
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: ynyJGnIVM1mb9dlr7R_1FkzEPEiFdMcbCRLGHzrjwmKJB1m
 CldggFSmSrBh_vaM1i3uxhBWylOuOm4GajJa730rcvLR3iYAcz2gWBPQAHKy
 Bae0amQzDICgARBgpmXboTwJZzFTnr0COelcoVZ08LNtPC3HyZcR8lR1Fuco
 Ng9unot2CF6lE3ZDR6Z2PRUhqf0dwMRl98r4tZOozTnKOHvNaeR4h5sGpd7d
 7ee5yivv5HqYOcpHgaTqdDJNmbqy16.LCBhvYinb59OTpzfL_Kqq.W0L0o1i
 9Cxpzfd9ifqsFyOR6EV3Rxk.Riy7zzwY21wCb0gBdhpooMpA7F_FDTBUTPBV
 xkhEd8YicwkM70Wvc0QFmqVVP_bCR5kKMAI2EfgIBlusCjBdgScTbGG7II6T
 GE64K4YGMSwRl6RbYhuScLhrQEgZOle7qqIVrsCx5NnaSrdUdWvJVt1nCMuT
 g8OwTWwW5nSU4oCGYtxdZa5mSC4k2cKRuF6HoRJDkz4agBnjwCCBBSYwoXLs
 6iJGpOiF_V89J7jNLvObCh6tsX5Axi0A58HCViF58irLoqV98e6l6.2PotD1
 iOf84lxodpcX8Qf21F4e8HYrqpTtq2K3TljoLI62II1THWYZCPk5ljgvbIh7
 S1mW52XXhZH76chrU5pMuIS8i52ZWIbYV8Y7olR2NlsG_DLeqca9IV0h_6EJ
 6EDdGAQ--
X-Yahoo-SMTP: SEC3zYiswBD9sq45lcyyeQipExkn8zEko29uJv0vlQ7fgU5pYYw-
X-Rocket-Received: from freebsd.example.ne.jp ([email protected] with
 plain [106.10.150.171])
 by smtp204.mail.ne1.yahoo.com with SMTP; 15 Mar 2014 01:09:01 -0700 PDT
Date: Sat, 15 Mar 2014 17:08:58 +0900
From: Masayoshi Fujimoto <[email protected]>
To: [email protected]
Subject: Re:
Message-Id: <[email protected]>
In-Reply-To: <[email protected]>
References: <[email protected]>
 <[email protected]>
X-Mailer: Sylpheed 3.3.0 (GTK+ 2.24.22; amd64-portbld-freebsd9.1)
Mime-Version: 1.0
X-BeenThere: [email protected]
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:[email protected]?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:[email protected]>
List-Help: <mailto:[email protected]?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:[email protected]?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: [email protected]
Sender: [email protected]



>How-To-Repeat:
Send DKIM signed mail to FreeBSD mailing lists
>Fix:
Install own DKIM filtering, removing old headers and substituting by 
FreeBSD.org's own or removing them altogether using suitable mail processing 
tools.

>Release-Note:
>Audit-Trail:
>Unformatted:
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to