I am having trouble that mail to some recipients from an outlook user is getting DKIM fail. I /believe/ (*) this is because a header with an empth first line, like:

>  References:
> <cabw_nmrffv9cx-xfrqjwbbazddabzgr_8bhqcb7mfm_yg+m...@mail.gmail.com>
>   <[email protected]>

is "fixed" by upstream to not start with an empty line, thus breaking dkim signing. Mail leaving my host has DKIM signature containing:

[...]References:=0D=0A=09<CABW_NmRF[...]

Putting a header_checks with "/^References:[\x0a\x0d\x09\x20]+(.*)/ REPLACE References: $1" seems to have fixed dkim-signing, but I've noticed that attached ("nested") emails also get edited, and I'd like to *only* edit the actual message headers, leaving attachments alone. Anybody have a recipe for that?

* Note: I don't *know* that I'm on the right track here. I've had trouble getting hold of mails as they look at the receiving end, and not all mails fail, maybe because the headers don't have empty lines, maybe because I'm totally wrong in my understanding.

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to