On 10/05/2025 08:23, Ken Biggs via Postfix-users wrote:
Return-Path:<x...@gmail.com>
X-Original-To:x...@xxx.com
Delivered-To:y...@yyy.jkbiggs.com
Received: from mail-qk1-f169.google.com (mail-qk1-f169.google.com 
[209.85.222.169])
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384)
(No client certificate requested)
by...@xxx.com (Postfix) with ESMTPS id 1CD1B200DF
for<x...@jkbiggs.com>; Fri,  9 May 2025 15:11:36 -0500 (CDT)
DMARC-Filter: OpenDMARC Filter v1.4.2 yyy.xxx.com 1CD1B200DF
Authentication-Results: OpenDMARC; dmarc=fail (p=none dis=none) 
header.from=gmail.com
DKIM-Filter: OpenDKIM Filter v2.11.0...@xxx.com 1CD1B200DF
Authentication-Results:y...@xxx.com;
dkim=fail reason="signature verification failed" (2048-bit key, unprotected) 
header.d=gmail.comheader.i=@gmail.com header.a=rsa-sha256 header.s=20230601 
header.b=RKA6a/wC
Received: by mail-qk1-f169.google.com with SMTP id 
af79cd13be357-7caea4bc9e9so459125485a.1
         for<x...@jkbiggs.com>; Fri, 09 May 2025 13:11:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
         d=gmail.com; s=20230601; t=1746821496; x=1747426296; darn=xxx.com;
         h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
          :date:message-id:reply-to;
         bh=9WXHEH+Ua31hBu54eP0LWpmaqkIUN2OsJGlLAjtdDlA=;
         b=RKA6a/wCNsjGeWDbSNrfAaEEAk3SM+ehP5vjMGJAD7IzYYj+GOEpedkbtu4T0WnBEx
          3foAEREMpDtru4NrbrBqkGOdLZtgxK41EVDIhfNXLBpb5ZYBGknSeXYbZUZsjQYBKz08
          flhI5hQew5XLSds1L4Opnd7TMdi9C3AEesULC2/Jf82kFgDdmg65EvstfvmF/z1Gn9k3
          qUoe1ubza8D7xaGRyFk7aOmNIlOAPVdr00ZOy9HYXCDHq9703YfINfd9rKBkpcmDbYvm
          qyxRTP9XUW/N1oEjVGOs2zaeOg+EY8P/WWAFg4dw70A8nhcnNKqRtDrRZ+wtwSMP+xUa
          vNKg==

Hi Ken

The order of these headers looks odd to me. It seems to be saying that the DKIM signature was added to the message, then it was passed to a Google MTA, then the DKIM and DMARC Authentication-Results were added, then it was received by your MX server? Have you reordered these headers at all? If so, what was the original order of the headers?

Thanks,

Nick.

_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to