[Chat] DKIM signatures

[Russell Coker]

On Tuesday, 3 January 2017 7:17:07 AM AEDT Scott Bragg wrote:
> The Admin team just restarted mailman and added the REMOVE_DKIM_HEADERS 
> = Yes line to the config.
> 
> As such I've turned off the "Munge From" and "from_as_list" options that 
> someone was complaining about. So keep an eye on your list traffic and 
> I'll keep an eye on the bounces.

Your message was sent at 7AM this morning, here are some of my logs from 11AM:

Jan  3 11:17:20 smtp postfix/smtpd[10399]: 9C35AEC65: 
client=mailhost.linux.org.au[192.55.98.181]
Jan  3 11:17:20 smtp postfix/cleanup[10416]: 9C35AEC65: message-
id=<1483401426.15071.9.camel at samba.org>
Jan  3 11:17:23 smtp opendkim[707]: 9C35AEC65: s=42627210 d=samba.org SSL
Jan  3 11:17:23 smtp opendkim[707]: 9C35AEC65: bad signature data
Jan  3 11:17:23 smtp postfix/cleanup[10416]: 9C35AEC65: milter-reject: END-OF-
MESSAGE from mailhost.linux.org.au[192.55.98.181]: 5.7.0 bad DKIM signature 
data; from=<chat-bounces at lists.lca2017.linux.org.au> to=<russell at coker.com.au> 
proto=ESMTP helo=<mailhost.linux.org.au>

It looks like the admin team didn't succeed in making mailman remove DKIM 
headers, either that or opendkim is logging a DMARC failure as a bad 
signature.

>From reviewing my logs it appears that I was the only person sending mail to 
the list recently who had ADSP enabled but not DMARC.  I did that because in 
the past using DMARC caused people to get unsubscribed from the linux-aus list 
(some receivers check DMARC not ADSP).  I've enabled DMARC which will help 
mail get through this list if Simon's suggestion is followed, but might cause 
problems for other people if there's a discussion on linux-aus that interests 
me.

As an aside, if you were going to choose a list server configuration for Linux 
in Australia that happened to cause mail from one domain to be rejected then 
surely samba.org wouldn't be the one you would want to reject.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/