Den 06.05.2026 21:24, skrev Håkon Alstadheim via Postfix-users:
I am having trouble that mail to some recipients from an outlook user
is getting DKIM fail. I /believe/ (*) this is because a header with an
empth first line, like:
> References:
> <cabw_nmrffv9cx-xfrqjwbbazddabzgr_8bhqcb7mfm_yg+m...@mail.gmail.com>
> <[email protected]>
is "fixed" by upstream to not start with an empty line, thus breaking
dkim signing. Mail leaving my host has DKIM signature containing:
[...]References:=0D=0A=09<CABW_NmRF[...]
Putting a header_checks with "/^References:[\x0a\x0d\x09\x20]+(.*)/
REPLACE References: $1" seems to have fixed dkim-signing, but I've
noticed that attached ("nested") emails also get edited, and I'd like
to *only* edit the actual message headers, leaving attachments alone.
Anybody have a recipe for that?
* Note: I don't *know* that I'm on the right track here. I've had
trouble getting hold of mails as they look at the receiving end, and
not all mails fail, maybe because the headers don't have empty lines,
maybe because I'm totally wrong in my understanding.
Post-mortem and summary:
I need relaxed/relaxed alignment with the signature (and various other
clean-up).
I actually *had* that, but during upgrades of my debian system, the
outgoing opendkim process lost its configuration-file command-line
option, and reverted to an old config, which was simply *wrong*.
Moral: Try to avoid custom init-scripts, at least when you only visit
them once every five years.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
