Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread Benny Pedersen
Felix Defrance skrev den 2017-08-10 17:09: Ok but in many other cases, spamassassin not failed at this point and validate the signing.. why it fail sometimes, and not all time ? verify when it fails what size the failed mail have, if that its truncated with amavisd, then extend mailtruncateing

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread Felix Defrance
Le 10/08/2017 à 16:33, RW a écrit : > On Thu, 10 Aug 2017 16:12:11 +0200 > Felix Defrance wrote: > > >> In the first lines on log, you could see opendkim results are success. >> >> Aug 9 10:25:42 vmail opendkim[21923]: 0D81A778B1D: DKIM verification >> successful >> Aug 9 10:25:43 vmail opendmarc

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread Kevin Golding
On Thu, 10 Aug 2017 15:12:11 +0100, Felix Defrance wrote: In the first lines on log, you could see opendkim results are success. Aug 9 10:25:42 vmail opendkim[21923]: 0D81A778B1D: DKIM verification successful Aug 9 10:25:43 vmail opendmarc[7879]: 0D81A778B1D: groupeastek.fr none That why

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread RW
On Thu, 10 Aug 2017 16:12:11 +0200 Felix Defrance wrote: > In the first lines on log, you could see opendkim results are success. > > Aug 9 10:25:42 vmail opendkim[21923]: 0D81A778B1D: DKIM verification > successful > Aug 9 10:25:43 vmail opendmarc[7879]: 0D81A778B1D: groupeastek.fr > none >

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread Felix Defrance
Le 09/08/2017 à 18:53, David Jones a écrit : > On 08/09/2017 10:19 AM, Felix Defrance wrote: >> Do you have any idea why the body has been altered sometimes ? I >> don't have any log about amavis alterate body message. >> > > This happens when any server in the path modify some of the headers or

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread Felix Defrance
Le 10/08/2017 à 14:46, Benny Pedersen a écrit : > RW skrev den 2017-08-10 02:06: > >> If amavis only passes part of the email to SA, it isn't going to pass >> DKIM. > > i think there is more underlaying problems there, amavisd have its own > dkim verify and signer, even if spamassassin does not s

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-10 Thread Benny Pedersen
RW skrev den 2017-08-10 02:06: If amavis only passes part of the email to SA, it isn't going to pass DKIM. i think there is more underlaying problems there, amavisd have its own dkim verify and signer, even if spamassassin does not see the fullmail, amavisd can verify and sign it still, so

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-09 Thread RW
On Wed, 9 Aug 2017 16:33:57 +0200 Felix Defrance wrote: > Hi all, > > I don't understand why Mail::SpamAssassin::Plugin::DKIM fail on > signature verification instead of opendkim success.. > > I see thats issues on domain which use onmicrosoft.com or > gappssmtp.com ... > Aug 9 10:25:43 vmail a

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-09 Thread David Jones
On 08/09/2017 10:19 AM, Felix Defrance wrote: Do you have any idea why the body has been altered sometimes ? I don't have any log about amavis alterate body message. This happens when any server in the path modify some of the headers or the body of the email after it was signed by the origin

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-09 Thread Felix Defrance
Do you have any idea why the body has been altered sometimes ? I don't have any log about amavis alterate body message. You don't think the problem came from this line ? SA dbg: dkim: FAILED DKIM, i=@groupeastek365.onmicrosoft.com, d=groupeastek365.onmicrosoft.com, s=selector1-groupeastek-fr, a=r

Re: SA dbg: dkim: FAILED DKIM .. does not match author domain

2017-08-09 Thread David Jones
On 08/09/2017 09:33 AM, Felix Defrance wrote: Hi all, I don't understand why Mail::SpamAssassin::Plugin::DKIM fail on signature verification instead of opendkim success.. I see thats issues on domain which use onmicrosoft.com or gappssmtp.com Here is the mail trace on my MTA, if anybody coul