Mailing List Archive: DKIM invalid

DKIM invalid

cconn at abacom

Feb 4, 2020, 1:32 PM

Post #1 of 7 (920 views)

Hello,

I am running SA3.4.3 and I noticed that I am scoring DKIM_INVALID on
pretty much each and every email handled by the MTA. However, if I take
the raw .eml and pipe it through spamassassin -t -D, I receive a
DKIM_VALID score.

Any tips on how I could go about to troubleshoot why the MTA-level scan
by the milter would score it invalid and a commandline test of the .eml
would return a different value on the same spamassassin daemon?

Thanks in advance,

Chris

Re: DKIM invalid [ In reply to ]

sausers-20150205 at billmail

Feb 4, 2020, 1:59 PM

Post #2 of 7 (920 views)

On 4 Feb 2020, at 16:32, Chris Conn wrote:

> Hello,
>
> I am running SA3.4.3 and I noticed that I am scoring DKIM_INVALID on
> pretty much each and every email handled by the MTA. However, if I
> take the raw .eml and pipe it through spamassassin -t -D, I receive a
> DKIM_VALID score.
>
> Any tips on how I could go about to troubleshoot why the MTA-level
> scan by the milter would score it invalid and a commandline test of
> the .eml would return a different value on the same spamassassin
> daemon?

Is your MTA and/or milter running in a chroot jail where it can't do
useful DNS resolution?

--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)

Re: DKIM invalid [ In reply to ]

spamassassin at arcsin

Feb 4, 2020, 2:09 PM

Post #3 of 7 (920 views)

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7785 maybe?

> I am running SA3.4.3 and I noticed that I am scoring DKIM_INVALID on
> pretty much each and every email handled by the MTA. However, if I take
> the raw .eml and pipe it through spamassassin -t -D, I receive a
> DKIM_VALID score.
>
> Any tips on how I could go about to troubleshoot why the MTA-level scan
> by the milter would score it invalid and a commandline test of the .eml
> would return a different value on the same spamassassin daemon?

Re: DKIM invalid [ In reply to ]

cconn at abacom

Feb 4, 2020, 2:12 PM

Post #4 of 7 (920 views)

On 2/4/2020 5:09 PM, Damian wrote:
> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7785 maybe?

Hello,

HM, very possible. I am using milter-spamc but the behaviour might be
similar. I will look to build 3.4.4 and see if I get better DKIM
returns. Thanks for this.

Chris

>> I am running SA3.4.3 and I noticed that I am scoring DKIM_INVALID on
>> pretty much each and every email handled by the MTA. However, if I take
>> the raw .eml and pipe it through spamassassin -t -D, I receive a
>> DKIM_VALID score.
>>

Re: DKIM invalid [ In reply to ]

cconn at abacom

Feb 5, 2020, 8:11 AM

Post #5 of 7 (917 views)

On 2/4/2020 5:12 PM, Chris Conn wrote:
>
>
> On 2/4/2020 5:09 PM, Damian wrote:
>> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7785 maybe?
>

Hello,

You were correct; using 3.4.3 on fedora with milter-spamc, pretty much
every email would match DKIM_INVALID when handled by the MTA and
correctly from commandline. I built 3.4.4-1.fc32 source RPM and
upgraded and the DKIM_INVALID issue is gone, I score VALID now on
outlook gmail and others.

Thanks for the tip,

Chris

Re: DKIM invalid [ In reply to ]

cconn at abacom

Feb 5, 2020, 8:29 AM

Post #6 of 7 (917 views)

> smart people would have opened koji, enter spamasssin,, select the F31
> package from
> https://koji.fedoraproject.org/koji/packageinfo?packageID=554 and
> downloaded
> https://kojipkgs.fedoraproject.org//packages/spamassassin/3.4.4/1.fc31/x86_64/spamassassin-3.4.4-1.fc31.x86_64.rpm
>
> or just used "dnf --enablerepo=updates-testing upgrade spamassassin"

I package a few plugins of my own for installation on other systems, not
sure why it is necessary to use personal adjectives. Sorry this question
had to irk some sensibilities.

Cheers

Re: DKIM invalid [ In reply to ]

cconn at abacom

Feb 5, 2020, 8:48 AM

Post #7 of 7 (917 views)

age a few plugins of my own for installation on other systems

> and hence you mangle the spamassassin package itself?
> oh my lord......
>
> [root@mail-gw:~]$ rpm -qa | grep spamassassin | sort
> spamassassin-3.4.4-1.fc31.x86_64
> spamassassin-bogofilter-1.0-8.fc31.20200204.rh.noarch
> spamassassin-clamav-3.0-7.fc31.20200204.rh.noarch
> spamassassin-iXhash2-2.05-16.fc31.noarch
> spamassassin-mxpf-1.0-7.fc31.20200204.rh.noarch

I will respectfully bow out of this discussion as I don't care to, nor
is it pertinent to this mailing list, for me to discuss my system
topology. And when I said I use fedora, that is not quite accurate
either, but again, outside the scope of this mailing list.

thank you for your input on my abilities, duly noted. I did not mean to
trigger anyone.

C.