1 Topic by gpapaiko

  • gpapaiko
  • Member
  • Offline
  • Registered: 2020-11-06
  • Posts: 40

Topic: DKIM FAILS after adding disclaimer

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  1.3.2
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: Ubuntu 20.04lts
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

I have just noticed that the DKIM status is now being set to FAIL when viewing original in gmail.

After a little research this is related to the addition of the disclaimer my amavis.
I have tested this theory by removing the disclaimer text files from /etc/postfix/disclaimer, restarting the services and sending out a test email, and the result is it DKIM passes, if reenable the disclaimer  text files and send out another test email and view the original the DKIM fails, email testing domain put this down to messages re-writes - the disclaimer.

The strange thing about this is that I have to domains setup and this does not happen with the second domain, only the first - base domain.

I have two domains setup on the email server.

Any ideas on how to resolve this issue?

Thanks in advance.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: DKIM FAILS after adding disclaimer

Does the failed testing email contain valid / correct DKIM signature in message header?

3 Reply by gpapaiko

  • gpapaiko
  • Member
  • Offline
  • Registered: 2020-11-06
  • Posts: 40

Re: DKIM FAILS after adding disclaimer

ZhangHuangbin wrote:

Does the failed testing email contain valid / correct DKIM signature in message header?

No they dont contain the same signitur.
I had a look as a few that had passed the DKIM test ( without the disclimer) and all the signitures were different..

As mentioned, If I remove the "disclaimer" then it passes the DKIM test, I re-add the "Disclaimer"  then it fails.

The strange thing is that is seem to only have to the base domain  ( the first domain that was set up).
I have since added a third domain and that passes the DKIM with with and without a "Disclaimer'.
This is from one that has the disclaimer:

Original message
Message ID    <2728-5fd73580-29-2a885c40@231276409>
Created on:    14 December 2020 at 20:49 (Delivered after 2 seconds)
From:    PostMaster Admin <postmaster@xx.info>
To:    George xx<george@xx.com.au>, Ins FW <insfw01@xx.net>
Subject:    Disclaimer test
SPF:    PASS with IP 27.32.225.101 Learn more
DKIM:    'FAIL' with domain xx.info Learn more
DMARC:    'PASS' Learn more
-----
Signature:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d= xx.info; h=content-type:message-id:subject:date :mime-version:user-agent:to:from; s=dkim; t=1607939395; x= 1610531396; bh=dQOouADrLm2dKdZubSZKQIWvRm1SUdgmyCk5IPfsme4=; b=A 5QAEb88zw+ZNLFLVzpGWThUQPG4XsX85NYRcKtqRrXEBTxccua8lejaAGbVR3NrJ EVMBts/agGbuiF3UsaMKl4oyac37ydWGSM9QUl3B8Y2kjEivjEd8xAQmVv1VOXlh AwTL3eVAprpO8tLqop/LbNuBbNqgUwiiwqWHuY4BFffFKAL44VAnAMvmxKebxQui bqQcKrw4WZT/5OZoopbjQN8cv0pj9t+nd5HjuHgdgxgOwVBi+S8qg2g4ksaKWtMo jIzPnA27KsZlIp4UUqp1qRh7wO1gcJF9xLZfrwpgcuHr35titWmTrHZ1C7CrLqOc dx75OUgN52//Pu7hU+UMQ==

And this is one without the disclaimer and it passes:

Original message
Message ID    <678-5fd5f380-1f-52d43080@70830614>
Created on:    13 December 2020 at 21:56 (Delivered after 4 seconds)
From:    George xx<gpapaiko@xx.info>
To:    GDXHfXXJaqhlOI@dkimvalidator.com, George xx<george@xx.com.au>
Subject:    DKIM test 004
SPF:    PASS with IP 27.32.225.101 Learn more
DKIM:    'PASS' with domain xx.info Learn more
DMARC:    'PASS' Learn more

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d= xx.info; h=content-type:message-id:subject:date :mime-version:user-agent:to:from; s=dkim; t=1607856991; x= 1610448992; bh=S7kafa48CIYWe3oTqRIHY92/2OsCWdr7Ct2678Wt5b0=; b=f RZP7XBL08B0/AnqBxQBvSWWOk2zpYxlcXFti5TQvyOpw1riVOB4suW9YzOtLM4Fr +hjVT5EJcEnilzJE77FsSiQbYggQg27JTKRqxBpyRnEB/2p0IbLb95q+7y2JPfHK AX3maOKul9G8gVGob0LDO5PvTdK6gUxvuv3/1V6l2YAwiBbbO3FKeCiXz2GGTOjb L8G3OFEVWk4V6AHkMLp1mNyI8k97rCRYppN4QOTnOXcx/o0WAXGTCbT+goHpBDN6 DnOw+tjAce+pW2US2onMzd+pj7FjVFDJ7DtU6WXHP2AxMivQNMEbIdsz8bFyfMkS Wz1ek4amNOrWXte7RAVZw==