DKIM FreeBSD 9.0

[Martin Sugioarto]

Am Thu, 26 Apr 2012 08:05:06 -0000
schrieb "Prabhpal S. Mavi" <prabhpal at digital-infotech.net>:

> Gmail servers says:
> smtp.mail=mark at digital-infotech.net; dkim=neutral (bad format)
> header.i=@digital-infotech.net
> 
> Yahoo Servers Says:
> Authentication-Results: mta1273.mail.mud.yahoo.com
> from=digital-infotech.net; domainkeys=neutral (no sig);
> from=digital-infotech.net dkim=permerror (future timestamp)
> 
> i tried to google to know the cause, but unable to figure out, is
> this my configuration problem or the public key is not correct that
> have copied in to DNS. ( imean the format). any idea please?
> 
> format of created DKIM in DNS:
> 
> "v=DKIM1; g=*; k=rsa;
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC678E6Ssjhf7Lw0By0BkjapnD4
> 1gG0zaB6NSNxUoXu0jblYqd+ZQEOxut9v/IvQXISVZnHFdX2Ilw8eTPS57lG4E/x
> FUx2bhYwp8wLQ1vK8rgrwl9im2lp3ELiwEfYXDy1BXxDRFY8x85xr5Zqxwkwm0i6
> 7/99HWWtcQTkV3VztwIDAQAB"

Hi Prabhpal,

can you please take a look at your signature header. My email client
shows that your emails has been signed 2 times (there are 2 headers
called "DKIM-Signature:"). This can be a problem.

Test it by sending an email to yourself.

Also... you should know about the problems around DKIM. Many servers
append illegal headers and possibly modify email contents (like this
mailing list here; it appends a signature and destroys the verification
phase). Sometimes you need to take action manually and filter out
headers from free mail providers etc.

When you save an email, this command will verify the signature manually:

/usr/local/sbin/opendkim -t email-file.eml

I cannot really tell what's going on and this can take very long to
figure this out. You should move the discussion to the official forums
as a more appropriate place for these kinds of discussions.

--
Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 834 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20120426/0bcc8041/signature.pgp