Mailing List Archive: Re: users Digest 29 Sep 2023 01:08:28 -0000 Issue 5575

Re: users Digest 29 Sep 2023 01:08:28 -0000 Issue 5575

Sep 29, 2023, 9:41 AM

Post #1 of 3 (154 views)

Hi - Can anyone tell me why the following email header triggered
DKIM_SIGNED and DKIM_VALID, yet I don't see a DKIM header line?
Strangely, if I run spamassassin from the command line on the message,
DKIM_SIGNED is not triggered.   SpamAssassin version 3.4.6

(Note, I truncated the X-Spam-Level header, as I have some customized
rules.)   Thanks. - MARK

Received: from SRV-EXCHANGE.sdis58.local
(static-css-csd-160189.business.bouyguestelecom.com [176.162.160.1

89])
        by simplerelay.pulsation.fr (Postfix) with ESMTPS id 644B1203A3E3;
        Fri, 29 Sep 2023 04:56:31 +0200 (CEST)
Received: from simplerelay.pulsation.fr (simplerelay.pulsation.fr
[80.74.64.73])
        by psfcmail2.psfc.mit.edu (8.15.2/8.15.2/Debian-22ubuntu3) with
ESMTP id 38T31Prc585381
        for <xxx@psfc.mit.edu>; Thu, 28 Sep 2023 23:01:25 -0400
Received: from SRV-EXCHANGE.sdis58.local ([fe80::5034:8469:e7c0:7ca0]) by
SRV-EXCHANGE.sdis58.local ([fe80::5034:8469:e7c0:7ca0%5]) with mapi id
15.01.2507.032; Fri, 29 Sep 2023 04:56:20 +0200
Received: from SRV-EXCHANGE.sdis58.local (192.168.20.11) by
SRV-EXCHANGE.sdis58.local (192.168.20.11) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.1.2507.32; Fri, 29 Sep 2023 04:56:20 +0200
Received: from psfcmail2.psfc.mit.edu ([unix socket])
         by psfcmail2.psfc.mit.edu (Cyrus
3.4.3-dirty-Debian-3.4.3-3build2) with LMTPA;
         Thu, 28 Sep 2023 23:01:27 -0400
Reply-To: <mrslerynnewest58@gmail.com>
From: "Louis LASTELLA" <Louis.LASTELLA@sdis58.fr>
To: "Louis LASTELLA" <Louis.LASTELLA@sdis58.fr>
Subject: RE: GRANT
Date: Thu, 28 Sep 2023 20:56:19 -0600
Message-ID: <c82e0c31791246b580568c693b8ed307@sdis58.fr>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0AB3_01D9F291.A3EE6670"
X-Mailer: Microsoft Outlook 16.0
X-Cyrus-Session-Id: cyrus-1695956487-582568-1-13949929973302507258
X-Sieve: CMU Sieve 3.0
X-Spam-Level: 5.61 (*****) DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU ...
X-Scanned-By: MIMEDefang 2.84
Thread-Index: AQE/AG+iBnwgFQrrEE2E+wgvHkku+Q==
Content-Language: en-us
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
X-OlkEid:
00000000D75AD23CECE28241A24D055234BB07EE0700C3B68E10F77511CEB4CD00AA00BBB6E600000000000B00005BBF9
7B16F0AE24BA3D270A63783157800000000CAB700007333E06029E36245B2E3DACE37D29594
x-originating-ip: [195.154.60.67]
x-esetresult: clean, is OK
x-esetid: 37303A2976F0D65A657466

Re: users Digest 29 Sep 2023 01:08:28 -0000 Issue 5575 [ In reply to ]

uhlar at fantomas

Sep 29, 2023, 10:46 AM

Post #2 of 3 (152 views)

Permalink

On 29.09.23 12:41, Mark London wrote:
>Hi - Can anyone tell me why the following email header triggered
>DKIM_SIGNED and DKIM_VALID, yet I don't see a DKIM header line?
>Strangely, if I run spamassassin from the command line on the message,
>DKIM_SIGNED is not triggered.?? SpamAssassin version 3.4.6

1. Hasn't your exchange wiped out dkim headers? Exchange and other
microsoft software like to do things like this..

2. are you sure they triggered your instance of spamassassin, not remote?

>(Note, I truncated the X-Spam-Level header, as I have some customized
>rules.)?? Thanks. - MARK

>Received: from SRV-EXCHANGE.sdis58.local
>(static-css-csd-160189.business.bouyguestelecom.com [176.162.160.1
>
>89])
>??????? by simplerelay.pulsation.fr (Postfix) with ESMTPS id 644B1203A3E3;
>??????? Fri, 29 Sep 2023 04:56:31 +0200 (CEST)
>Received: from simplerelay.pulsation.fr (simplerelay.pulsation.fr
>[80.74.64.73])
>??????? by psfcmail2.psfc.mit.edu (8.15.2/8.15.2/Debian-22ubuntu3)
>with ESMTP id 38T31Prc585381
>??????? for <xxx@psfc.mit.edu>; Thu, 28 Sep 2023 23:01:25 -0400
>Received: from SRV-EXCHANGE.sdis58.local ([fe80::5034:8469:e7c0:7ca0]) by
>?SRV-EXCHANGE.sdis58.local ([fe80::5034:8469:e7c0:7ca0%5]) with mapi id
>?15.01.2507.032; Fri, 29 Sep 2023 04:56:20 +0200
>Received: from SRV-EXCHANGE.sdis58.local (192.168.20.11) by
>SRV-EXCHANGE.sdis58.local (192.168.20.11) with Microsoft SMTP Server
>?(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
>?15.1.2507.32; Fri, 29 Sep 2023 04:56:20 +0200
>Received: from psfcmail2.psfc.mit.edu ([unix socket])
>???????? by psfcmail2.psfc.mit.edu (Cyrus
>3.4.3-dirty-Debian-3.4.3-3build2) with LMTPA;
>???????? Thu, 28 Sep 2023 23:01:27 -0400
>Reply-To: <mrslerynnewest58@gmail.com>
>From: "Louis LASTELLA" <Louis.LASTELLA@sdis58.fr>
>To: "Louis LASTELLA" <Louis.LASTELLA@sdis58.fr>
>Subject: RE: GRANT
>Date: Thu, 28 Sep 2023 20:56:19 -0600
>Message-ID: <c82e0c31791246b580568c693b8ed307@sdis58.fr>
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>??????? boundary="----=_NextPart_000_0AB3_01D9F291.A3EE6670"
>X-Mailer: Microsoft Outlook 16.0
>X-Cyrus-Session-Id: cyrus-1695956487-582568-1-13949929973302507258
>X-Sieve: CMU Sieve 3.0
>X-Spam-Level: 5.61 (*****) DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU ...
>X-Scanned-By: MIMEDefang 2.84
>Thread-Index: AQE/AG+iBnwgFQrrEE2E+wgvHkku+Q==
>Content-Language: en-us
>X-MS-Has-Attach:
>X-MS-TNEF-Correlator:
>X-OlkEid: 00000000D75AD23CECE28241A24D055234BB07EE0700C3B68E10F77511CEB4CD00AA00BBB6E600000000000B00005BBF9
>7B16F0AE24BA3D270A63783157800000000CAB700007333E06029E36245B2E3DACE37D29594
>x-originating-ip: [195.154.60.67]
>x-esetresult: clean, is OK
>x-esetid: 37303A2976F0D65A657466

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Christian Science Programming: "Let God Debug It!".

Re: users Digest 29 Sep 2023 01:08:28 -0000 Issue 5575 [ In reply to ]

mrl at psfc

Sep 29, 2023, 10:57 AM

Post #3 of 3 (152 views)

Permalink

Sorry, I didn't change the subject line when I posted this.

On 9/29/2023 12:41 PM, Mark London wrote:
> Hi - Can anyone tell me why the following email header triggered
> DKIM_SIGNED and DKIM_VALID, yet I don't see a DKIM header line?
> Strangely, if I run spamassassin from the command line on the message,
> DKIM_SIGNED is not triggered.   SpamAssassin version 3.4.6
>
> (Note, I truncated the X-Spam-Level header, as I have some customized
> rules.)   Thanks. - MARK
>
>
> Received: from SRV-EXCHANGE.sdis58.local
> (static-css-csd-160189.business.bouyguestelecom.com [176.162.160.1
>
> 89])
>         by simplerelay.pulsation.fr (Postfix) with ESMTPS id
> 644B1203A3E3;
>         Fri, 29 Sep 2023 04:56:31 +0200 (CEST)
> Received: from simplerelay.pulsation.fr (simplerelay.pulsation.fr
> [80.74.64.73])
>         by psfcmail2.psfc.mit.edu (8.15.2/8.15.2/Debian-22ubuntu3)
> with ESMTP id 38T31Prc585381
>         for <xxx@psfc.mit.edu>; Thu, 28 Sep 2023 23:01:25 -0400
> Received: from SRV-EXCHANGE.sdis58.local ([fe80::5034:8469:e7c0:7ca0]) by
> SRV-EXCHANGE.sdis58.local ([fe80::5034:8469:e7c0:7ca0%5]) with mapi id
> 15.01.2507.032; Fri, 29 Sep 2023 04:56:20 +0200
> Received: from SRV-EXCHANGE.sdis58.local (192.168.20.11) by
> SRV-EXCHANGE.sdis58.local (192.168.20.11) with Microsoft SMTP Server
> (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
> 15.1.2507.32; Fri, 29 Sep 2023 04:56:20 +0200
> Received: from psfcmail2.psfc.mit.edu ([unix socket])
>          by psfcmail2.psfc.mit.edu (Cyrus
> 3.4.3-dirty-Debian-3.4.3-3build2) with LMTPA;
>          Thu, 28 Sep 2023 23:01:27 -0400
> Reply-To: <mrslerynnewest58@gmail.com>
> From: "Louis LASTELLA" <Louis.LASTELLA@sdis58.fr>
> To: "Louis LASTELLA" <Louis.LASTELLA@sdis58.fr>
> Subject: RE: GRANT
> Date: Thu, 28 Sep 2023 20:56:19 -0600
> Message-ID: <c82e0c31791246b580568c693b8ed307@sdis58.fr>
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>         boundary="----=_NextPart_000_0AB3_01D9F291.A3EE6670"
> X-Mailer: Microsoft Outlook 16.0
> X-Cyrus-Session-Id: cyrus-1695956487-582568-1-13949929973302507258
> X-Sieve: CMU Sieve 3.0
> X-Spam-Level: 5.61 (*****) DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU ...
> X-Scanned-By: MIMEDefang 2.84
> Thread-Index: AQE/AG+iBnwgFQrrEE2E+wgvHkku+Q==
> Content-Language: en-us
> X-MS-Has-Attach:
> X-MS-TNEF-Correlator:
> X-OlkEid:
> 00000000D75AD23CECE28241A24D055234BB07EE0700C3B68E10F77511CEB4CD00AA00BBB6E600000000000B00005BBF9
> 7B16F0AE24BA3D270A63783157800000000CAB700007333E06029E36245B2E3DACE37D29594
>
> x-originating-ip: [195.154.60.67]
> x-esetresult: clean, is OK
> x-esetid: 37303A2976F0D65A657466
>