1

Topic: DKIM issue, verification of message body fails

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.9 PGSQL edition
- Deployed with iRedMail Easy or the downloadable installer? N
- Linux/BSD distribution name and version: OpenBSD 6.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx): N
- Manage mail accounts with iRedAdmin-Pro? N
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Problem: Doing a header check on mxtoolbox I see Signature Did Not Verify or Body Hash Did Not Verify in regards to DKIM. When I email gmail or other providers such as Protonmail email goes through to the inbox fine, but for Microsoft based email this is enough of a problem that it gets junked.

I have tested the following:
- Emailing from the Android mail app and Thunderbird, as well as doing a header check from an alert email from PfSense and FreeNAS, all have the same issue.
- Using http://dkimvalidator.com or https://www.port25.com/authentication-checker/ I get a DKIM pass without an issue strangely.
- Adjustments in amavis conf as you will see

Notes:
- clamav is turned off and also disabled in amavisd.conf
- I am not running out of system memory
- In the attached files privatedomain.com represents my domain and likewise with the IP 11.11.11.11

Example header:

Received: from YTXPR0101MB1950.CANPRD01.PROD.OUTLOOK.COM
(2603:10b6:b00:15::39) by YQXPR0101MB1943.CANPRD01.PROD.OUTLOOK.COM with
HTTPS via YTOPR0101CA0026.CANPRD01.PROD.OUTLOOK.COM; Mon, 21 Jan 2019
02:47:27 +0000
Received: from YTXPR01CA0055.CANPRD01.PROD.OUTLOOK.COM
(2a01:111:e400:7a0f::23) by YTXPR0101MB1950.CANPRD01.PROD.OUTLOOK.COM
(2603:10b6:b00:e::33) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26; Mon, 21 Jan
2019 02:47:26 +0000
Received: from TO1CAN01FT004.eop-CAN01.prod.protection.outlook.com
(2a01:111:f400:7e5d::200) by YTXPR01CA0055.outlook.office365.com
(2a01:111:e400:7a0f::23) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.25 via Frontend
Transport; Mon, 21 Jan 2019 02:47:26 +0000
Authentication-Results: spf=pass (sender IP is 11.11.11.11)
smtp.mailfrom=privatedomain.com; senttodomain.com; dkim=pass (signature was verified)
header.d=privatedomain.com;senttodomain.com; dmarc=pass action=none
header.from=privatedomain.com;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of privatedomain.com designates
11.11.11.11 as permitted sender) receiver=protection.outlook.com;
client-ip=45.63.15.84; helo=mx.privatedomain.com;
Received: from mx.privatedomain.com (11.11.11.11) by
TO1CAN01FT004.mail.protection.outlook.com (10.152.122.115) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1558.11 via Frontend Transport; Mon, 21 Jan 2019 02:47:26 +0000
Received: from mx.privatedomain.com (mx.tetmail.ca [127.0.0.1])
    by mx.privatedomain.com (Postfix) with ESMTP id 43jbYp1xgLz1Lxk
    for <senttouser@senttodomain.com>; Mon, 21 Jan 2019 02:47:26 +0000 (UTC)
Authentication-Results-Original: mx.privatedomain.com (amavisd-new); dkim=pass
(1024-bit key)    reason="pass (just generated, assumed good)"
header.d=privatedomain.com
DKIM-Signature: v=1; a=rsa-sha256; d=tetmail.ca; h=
    content-transfer-encoding:content-language:content-type
    :mime-version:user-agent:date:message-id:subject:from:to; s=
    dkim; t=1548038845; x=1550630846; bh=SYWW2Nrmp2FwAMLob8nsbS33r4G
    tO2KkG5GNKC0esWU=; b=UQNSCIQJrvePtK04yfEdnLHsUdvuAU3mr2OrqGMkD6g
    FOrByweHfuIpNWioX8MUYLbdZL7pD3TZ6HyfGjme7zn+MbBvK3iwBm5y1Of/mLql
    Yfd4Dt2giaZGOXhcotttsUxSFtgaYLBbbcQokgbJBwHWW2jFr7ND3aLx/ZqxUC1s
    =
Received: from mx.privatedomain.com ([127.0.0.1])
    by mx.privatedomain.com (mx.privatedomain.com [127.0.0.1]) (amavisd-new, port 10026)
    with ESMTP id KcSVZMahjQlf for <senttouser@senttodomain.com>;
    Mon, 21 Jan 2019 02:47:25 +0000 (UTC)
Received: from mycomputername.domainname.com (S54623456g568.wp.shawcable.net [24.78.149.195])
    by mx.privatedomain.com (Postfix) with ESMTPSA id 43jbYn4F8dz1Lxh
    for <senttouser@senttodomain.com>; Mon, 21 Jan 2019 02:47:25 +0000 (UTC)
To: senttouser@senttodomain.com
From: Daulton <daulton@privatedomain.com>
Subject: Test #7
Message-ID: <7404a62e-70a3-dd6d-5e85-ca565a91e5c5@privatedomain.com>
Date: Sun, 20 Jan 2019 20:47:23 -0600
User-Agent: Mozilla/5.0 (X11; OpenBSD amd64; rv:60.0) Gecko/20100101
Thunderbird/60.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-GB
Content-Transfer-Encoding: 7bit
Return-Path: daulton@privatedomain.com
X-MS-Exchange-Organization-ExpirationStartTime: 21 Jan 2019 02:47:26.7426
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
a2ae1b31-6597-46b0-83f4-08d67f4ac74b
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 2db8f5b4-c71d-41e3-b426-1ba68e9185f3:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report:
CIP:45.63.15.84;IPV:NLI;CTRY:;EFV:NLI;SFV:SPM;SFS:(189003)(199004)(956004)(126002)(2616005)(476003)(555874004)(486006)(2160300002)(426003)(106002)(65956001)(2361001)(36906005)(356004)(65806001)(2351001)(620700002)(6916009)(106466001)(558084003)(34756004)(7116003)(58126008)(47776003)(65826007)(305945005)(7596002)(36756003)(7636002)(230700001)(246002)(53416004)(52146003)(74482002)(34003)(86362001)(67846002)(1096003)(31696002)(6266002)(8676002)(64126003)(50466002)(336012)(23676004)(31686004)(2486003)(26005)(44180200009);DIR:INB;SFP:;SCL:5;SRVR:YTXPR0101MB1950;H:mx.tetmail.ca;FPR:;SPF:Pass;LANG:en;PTR:mx.tetmail.ca;MX:1;A:1;CAT:SPM;
X-Microsoft-Exchange-Diagnostics:
1;TO1CAN01FT004;1:/fzkoCwl8nKAnkfIczORSDTI8+VrKcsSsHdW1a9joKQoG+iKP5U37ky6hoaR8QYki7BDnWyMUiHaD3Dt9Kg9qkTqvaW5YonO4qhL4C0RYqexOk7lrJx92jp0x+niSiFlR6VE+SsacfYE9CHQRMX2gg==
X-MS-Exchange-Organization-AuthSource:
TO1CAN01FT004.eop-CAN01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: a2ae1b31-6597-46b0-83f4-08d67f4ac74b
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(5600109)(711020)(4605076)(4608076)(4709027)(1401299)(8001031)(1421009)(1402068)(71702078);SRVR:YTXPR0101MB1950;
X-Microsoft-Exchange-Diagnostics:
1;YTXPR0101MB1950;3:Ucgyo37mYINBddI+mXvXT97egX7uyPP0PLK0ARl351Mm6pgxB75otN27js+oOvijbgJAysxn1Wujc6rwA1PXh4XSZl13ZkAdngM2dbCqUPxraVJ+4UqVEfBFg+sYg2cAYUpVxlti4+aWXl2WPUBI8IJoXzIip8CxLanbDxSeAgy6fsGpBb73HduNy0BYpFXucp/HSjYPTaAqSzjG2DxQQDePfmo/n4AAgUeOvdYD2tQSKHJh44XycNjMWR6GyYD4Wqr3f1aVG7nFhtsxnlbJCsc0tc7SJsB6U5Wv45jC2WGHpygnAV3wyng+xy24eCeXVUBC0OzISzFM/s+SKYKS/UWjElfHhzhhJS9O9mN94DjbFqusREG31pI6Xo5FBgnN;25:ilTHcEyLbhmRgE7dJ22D2GohYGXeWPJ19Q073naVei97UK06g+m5fgJxDlu411LKu5nOh3quuiX1J8eUCbyBZa5+Xlf+WmUZ2C7+fkdNCwKlo4l94AdE5lw4zBoqtJUW49SmB/8kILSc3oP6EHrn6LbSgRSh/H5HqO+QUV0Er3WqiYfn4EVXfEmlPa29oLP0HoiTKN84j2aLihPX5e90AVGXvLJ/YKTQTumppMKZLDs=;31:SD9TOHqCRGvOdzLTIUhpnUcJFndlRPkKcN5gHDeCNN0HrxTukK+T7PmKRBx0jgo/N5mk99Iw7eu0/N2aOqcpObd8/SR9H8hH4WW4l4rIUqkk69QIcO5QqkdGdI3SDsXg
X-MS-TrafficTypeDiagnostic: YTXPR0101MB1950:
X-Microsoft-Exchange-Diagnostics:
1;YTXPR0101MB1950;20:WmLXNH32stvRfzU8CRwtNcYLajaoUHdun37E6BR3/T6BLrDAZLn4cu8yc7E0mVxzgJCcrbUqY7aLqsIZzlpEyaLqNMcNxgxDdpnTzphIZ+JVbBRI2XA4qgY73hn00skPK6GFAD6pUKw7v1SyCJVsGOV56+Tza+dO1S6qL2TRDDj+SerOlfA6/ffIyVRXyfE3eIxK0JEe2ECtAj4BR4gc9jxqyh/S+5AhgxEukdrfKtpGx76up5lheS8Mpkz1aBgfJ4t877w10oKbvD4TJJqL5UYssBn5ZT2koOUMS+//iMXZydQUIACs8NNTjkUj2tpdg2Ydcp/+jG4+iOpnO/EI3wk2+z6l4AXT444uq0E7eXhQGiWNX54rGE83fYVOv64/KBcgX0EFL+/xtboeJnRjfLaDJ72M8YOR+nwH+ann7jrNXKZgxUOERLYO++tMq2CpJouj9+Nc2DRW6fV4OHibAIm4jNNsZWmdrEAQtPKu3Et8DHy1JErv9NVU4Jex6QLF;4:UYUPwGfhKMHqUwKM912CJxZFx/KF1M1J5D5QI+iYb8wb7USV45RyYTE2M7OpbdMQMVLscxWQixyC9wRztiDNIagy220tEp98PoQILN7EwFaGsUHRbHNXYnvcYEQHOQmgwhLAlDfOW4KwxS49ju5zqLvAw5zC3ESo6jwPtCmHAQaZa69gYPFtOIJ6E7vGjNL9
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics:
=?utf-8?B?MTtZVFhQUjAxMDFNQjE5NTA7MjM6b1o3UmFmczVTTUpvalVTNUVnTmgzUTVp?=
=?utf-8?B?UDBzYzd6cFNyK2Q4SjEwTjM3bG5JN2RwVVhDaUxkUXpqTFI4Q3Vxdi84MmNr?=
=?utf-8?B?ZHIyMG5ma0JMcThGM3VWYnd1b2RldlVieHdqZE9jZXZrNG15MjZ5QklpWCto?=
=?utf-8?B?SjFRUmt0R3NPSVBFWVNpckdwbU92TjZQek1nYlJkdUU2Yi9JcklGYWQ5a2FI?=
=?utf-8?B?bE5EakNKbzNSZUdSQURONDh6WjNaL3kzalZ1cmdKSWh2R2s4ZE0yL3ZHLzNx?=
=?utf-8?B?dGROZDBmUmZCODBJWDZxbjVDTHdVNW5Nekc3UjhDZUhDZmlTbzNNbks3SlVS?=
=?utf-8?B?Uy9nVTJTd0RjYXFQYm9lSUxIUXpGY2YzS3c0UUFDcklORW5ld20rYWNuV1FH?=
=?utf-8?B?WXNHd2k2ZXRzSmxSUHZVTFVRWDREVWRsZjl0TEMrUGMvMjY2SVZWbVByMzd4?=
=?utf-8?B?VElVVjVMcGZVQks4bHJBUjNsYmVaSlRUbWRqTTc5NENZT0ZNQVNvcmV4b1I2?=
=?utf-8?B?cEpIUm1EakVMU1cyY215UFpvZXc4UXIzQXBMZ0FlU3dzZVhWQjNZODN0RkVK?=
=?utf-8?B?ZVN0cGduci9zRExtU3NvaE42OUZiNUNMQ3FQa1hudXN1Vm0rSThOVjBUWmpv?=
=?utf-8?B?cW9uTitrNlRKMitPRUxVblVOa0JUMExrQ0RaV1p2MDhnR0gxN3BySDludi9X?=
=?utf-8?B?K3hhNXBDMm1KK0xQaHkzc0pBTFh6MnNVOTBLazZMQWlFVzF1Z0RDc0JMVk9G?=
=?utf-8?B?ck44OVRseFRCdXhjNEMvRitFeGt2ZGk5RHRUd0dHZ1hwSjBTOHFZM0wxSGpZ?=
=?utf-8?B?S1NjWG1wZGhJTmUzSHFmUVk0SmREVHNkNUFaOHhFMmdkYTNGMmZMQ05sQnlu?=
=?utf-8?B?bjR4N0FLUEI2bnlXMlhGQU56OG5JYUc4K25XZWUvYWlnWXByUW9HVlpnT2dl?=
=?utf-8?B?bWFLQStrOE1kY3g5bG9rTGxnY1JoWWVQYk9aRGRKQnpZbmMzcEJpdHdDQTlv?=
=?utf-8?B?VzI5eVlveFF4ZUlkaUF5dVFCdEk1bm1QaWtGM20vNmY3cW1zMEg4R2ZpdjZV?=
=?utf-8?B?bFdTbmRFL2tldzB2aU9HTTJPUHN3VGd0WXZyNTNqNVY1T2sxOHplYmRrREdE?=
=?utf-8?B?b1NXb1ZudkVvMlR4MWFtR01XUlJMTXAwSG51ZEJFdXd0bWNDcXphc0hIRjE1?=
=?utf-8?B?MG43WTllYTFNN0xiU3NmV3FTSlZkZnNGWmhSNmlpR2pGb1o0TEtqM3RnRmFh?=
=?utf-8?B?NlprOUlnU2xZaDV0ZjVtMzE3WHpTbjIwNTh3OUZNbjBTZG1ETzkvK0xuejky?=
=?utf-8?B?bUhueVBsWkRSNGRmME5QY2lTTFNROThzTTRPdWlFOWJ6eXF5UTJEOGZHeW5G?=
=?utf-8?B?Zy95bFlrbmR2MVlJcHA1YU9ybzBhVVFjMWtKdlpSMG9pVGw2b3ZYZmkrcjli?=
=?utf-8?B?UW1CSVhVMFVPTllFalpvWGxPamtLUUhOTEdPVHZQRFQ5TWpDUFlEMWpKS2RP?=
=?utf-8?Q?M2slarwlCUhfu/B+MVySdIkWs6I=3D?=
X-Microsoft-Exchange-Diagnostics:
1;YTXPR0101MB1950;6:KUtZF3T9elKxnSKmX2cq6LxRqP3kGgLWJA1gtBJ5G/b1XBWlZR4oPmwDkcCnm/5zecuXt5PHcEt3Aom8h4/iUIIPMWaKC64Aw3bAKShiW08XyzTlET4Flqe1yMp0WEx8JenLEiuENOMP3w1FJyeOtel5us6U2LKxXPRHfHqa9DzJF7dWvck+hsmt2tDrAA1a7HWODzIBJtGHPN7vT8wm4mJ0+gEMu0RdgvF2dZHxK4U1gr2OfiJWaMdsoiJhCTKthSd0cab8+0sfhOtj6cuP0MYVN3xnXpcd9Fxs9bPXiTVY40vr4a1J1g6tvC42VyNJ9ugXveNTXuUDnGB1/pwSxZG+sm95dDhrYoNM2dTfOqc=;5:cs8SN8pbwo3Ju50CChTxutc0FBK9pTsmZGryVlcNK4RWhJxpIlKnQwX3PEVsU0WjH6kG0ygNzSii0ScxuArR8CdFIHaWckyqgSBfpD79hNox3qa5OxRi4ha+4rEPf4B54Ccskbws6Vwys04tMc+aG1hNGO7Js5BK+uXWE62gvSco4e8wc6pzoBvehmQUYcvrZycnIWzIn8/dGQYLz4xLDQ==;7:woAnsIFX9WYwZTJKcg5Vgn7P6IgYQJUfhI5c63RS/X003OcEzngvXoMN2fEb/RXhjR1wR3o6LzV8NdO+wsRFWv9VqsR9X53awUL/d2brXPH2exf/Epo3xSA5/F0z5vG2Hpfhaui2m1aLirsPOLHNkg==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Default
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2019 02:47:26.5082
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a2ae1b31-6597-46b0-83f4-08d67f4ac74b
X-MS-Exchange-CrossTenant-Id: 2db8f5b4-c71d-41e3-b426-1ba68e9185f3
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: YTXPR0101MB1950
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1502148
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1537.000
X-Microsoft-Exchange-Diagnostics:
    1;YQXPR0101MB1943;9:3d0rtR7ajJmV5L88r1q6G/ujwZJzdP4/2RMSxoyOTOYL8mdib7HW0HTpz9WcHo65b4lBGdjtUqWo8JVI8IZox3qA2/qYis93/9qag71qEIRc9117usZjmCvcJEZVJ7o6n1VHchIeIwJOLwI13HZhi/akJ1+I1NM1TjvPR2T/pIE=
X-Microsoft-Antispam-Mailbox-Delivery:
    ucf:0;jmr:1;ex:0;auth:0;dest:J;ENG:(20160513016)(750119)(520011016)(944506303)(944626516);
X-Microsoft-Antispam-Message-Info:
    =?us-ascii?Q?/JClyKajtDxbgGlwSjbGhb54gqq3t5UOuhPBaoT6QrycRh3gohvle7iWSZU1?=
=?us-ascii?Q?IsoiSBtpxTqcyPG/8QPfz0FmVYKYu+oZsVYb9fAXG9pq+LF3m/aaRm9Mzy9h?=
=?us-ascii?Q?KjgdXRflevrohwqYehDot6j8hxhRNRkJV+6pJSjUY8Dj4Gb9n/7kWz48zjON?=
=?us-ascii?Q?0OSkNC+vJUJnlXVM1z9NyNICGBsnKvU2TABmPJ5mqhAD52jNfgiJdhkd3Vze?=
=?us-ascii?Q?qWUqYmn3iBSlwRUX53ASVKK6GeVk3u18PEROhniCdjAGY4GplRcYzjta+dKt?=
=?us-ascii?Q?zbsL+LxFbUXLFPntWPyjd//k6ECU60azFGTs2O5W577MVQ8l1a0KSFbYQUF+?=
=?us-ascii?Q?Wjvh55m467argdCX0izv4X7QxGwjDYImR9kQiT7a4VzwUtYGwa3cx0L92QMu?=
=?us-ascii?Q?lcHVd674dHrFxaSUlkpYj6b2bgDPhQpR3oUX9yOmSVDhW6yBBJVKoDnA5CXD?=
=?us-ascii?Q?xvdwTDxxUO6YGW0egpqxjGMzM9pGUjBlcMweNFogZk5S2hUsDQ5hxwAc1/HB?=
=?us-ascii?Q?OEt124H400e1o2sBE6hwobhGo6uGRrKXeaGvJETcUbK1nkBwPeeM2wVnCNyD?=
=?us-ascii?Q?JsvPolH14vkj4RyhOxksvcoZHt+LT+QiNmMaCHvJtWNZcEdTwtT7eF7zXMzI?=
=?us-ascii?Q?WukjSqFNiPqleIgJGvRgxCFOQNJjC20Q8tzf3HBAm42VFn3VHrY8SvYpWpIo?=
=?us-ascii?Q?RbHQGmg2A2tVqmTNJjPBXO1cOXD/prK5NS+JgFFZK8mL7hoY1e5+uBd83rLC?=
=?us-ascii?Q?cNJrKWY+ZlR4SzV9i9U7QWkqlFTlilpY4jM+MJ3cuWP21ahWhxLUzk9Wcnyc?=
=?us-ascii?Q?IHYfQH9wRfZA7Hj1n/UH4Hvw3BVsBwwAyDaqxMet7aG5wWFeuzU6PTEXIwKa?=
=?us-ascii?Q?KgrYhpBnK6raSyOouY/3GSDr1dCOe7proRGz251aCxhWrno3hjM1fx+HJS8u?=
=?us-ascii?Q?U+Ka5lBMbiP9BFoSbIWB9BVioIfzQX62wkthkadb2x/+ReAsCR9VxrEuVCOH?=
=?us-ascii?Q?xf461DqwUu3ZYy8YMggF36+mzipjVgPyXobTKgOBqOUh1oZT/jYPhY0EY7jF?=
=?us-ascii?Q?EnTQpwO1weW8hCCqzlRunfvwVeLCJRZKtbBHsdouJoKHUng/KoFxc0qJsVn1?=
=?us-ascii?Q?Fe6evI6iOm5lfFtvYyJNmq250jEl1YLf9Q=3D=3D?=
X-Microsoft-Exchange-Diagnostics:
    1;YQXPR0101MB1943;27:Y+8IiUFktNyUpF9+2eqN6l/gGI9hlx5KmpRnUqmZyI0rtgOxu5wlztQ4h0QjGsKyiuD++NtUccsZ34cRG9duf+R/K+ajvZ4ED0XghPXsdxBQjmkk8xpch8wWFWszTKGLOwlXPr4rA48GOPJtei6jDyYkGCmzS/YSXOCBlVGz6nSNB/OcHs1cxGbeE7lGxX9ssELDLctycP1QwZdQiImSGJZGi+It/FZmdDospspySU0p9/OKii/lfgzCIzRVoindeiypqbmbiaxp8XhLTgzRQOFdeGRHFHY9poCY4QBI1Yx5JJJsAdHg6sm61TfJuA3bCD+KCxsnkj5dif9STG4UeS7ZtsRHFZAQQZRuM9sKwQ5ztKlAQ+ySx0gpUl8emobCK/buHXXGtIEta25P9XufSsG5pSav74p/Bj4/+6almD8DbrKNWZo2mIGIW3asRDsf



Mxtoolbox header check on this header yields 'Body Hash Did Not Verify' with the given configs.

Any advice would be helpful.

Thanks

Post's attachments

amavis log level 5.log 7.22 kb, file has never been downloaded. 

amavisd.conf 30.54 kb, 1 downloads since 2019-01-21 

main.cf 5.21 kb, 1 downloads since 2019-01-21 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: DKIM issue, verification of message body fails

If the email you sent out is signed with correct DKIM key, and you have correct DKIM public key published in DNS, then it's fine on your end.

Do you have detailed explanation of what "Body Hash Did Not Verify" means?

3

Re: DKIM issue, verification of message body fails

If the email you sent out is signed with correct DKIM key, and you have correct DKIM public key published in DNS, then it's fine on your end.

mx# amavisd testkeys
TESTING#1 privatedomain.com: dkim._domainkey.privatedomain.com => pass

Do you have detailed explanation of what "Body Hash Did Not Verify" means?

From what I gather from reading its that the message body of the email has somehow changed after submission so the hash stored in bh within the DKIM-Signature Header no longer matches. Now this strictly sounds like something that is not my systems fault, but that gets me wondering how and why is this happening with email sent to multiple providers so surely something about my system is behaving strangely or improperly set-up

4

Re: DKIM issue, verification of message body fails

I'm afraid that i cannot answer this question. sad
Do you have any spam/virus filter software in your network?

5

Re: DKIM issue, verification of message body fails

ZhangHuangbin wrote:

I'm afraid that i cannot answer this question. sad
Do you have any spam/virus filter software in your network?

Thanks anyway sad I will see if I can get to the bottom of it. If you think of any wild things to check or try please let me know.

I do, Snort runs on the edge router. But as the mail server is a VPS outside my network and I tested the Android mail app, without being on the wifi network here, it still had this same effect unfortunately.

6 (edited by neoark 2020-02-23 05:06:25)

Re: DKIM issue, verification of message body fails

I am running into same issue:

https://vamsoft.com/forum/topic/853/bla … esult-fail

There is definitely iredmail forwarder that is causing this.

This happened when I send message from Roundcube to a protonmail email and check the message headers at:

https://9vx.org/~dho/dkim_validate.php

This seems like a bug caused by the forwarder.

7

Re: DKIM issue, verification of message body fails

Dear Team,

We are getting Re: [Warning][DKIM Failure]  error when we are sending the email.
DKIM is showing ok  on mxtoolbox.com

Please suggest the solution

8

Re: DKIM issue, verification of message body fails

1st - don't bring up old topics, start new thread instead
2nd - try on this site: https://www.appmaildev.com/en/dkim
what does it say?