Re: hmmm

[SM <sm...@re...>]

Hi Scott,
At 19:45 25-11-2004, Scott Grayban wrote:
>According to the -H settings the anti-virus is set before the key is:
>DomainKey-Signature:    a=rsa-sha1; s=borgnet.us; d=borgnet.us; c=simple; 
>q=dns; 
>h=received:date:from:mime-version:to:subject:message-id:content-id:content-type:x-antivirus; 
>b=NWrutUaKn6aI5AcToq9AToVh4/I4JxtFlh/F+Yzm5amVDROjMTkTmxfGMCnDPaSpL 
>OdRtZ8GuR5apeJ026EVmA==

I didn't notice that you were using the -H setting.  Can you remove the 
x-antivirus header from that setting and test?

>But according to what yahoo shows when they get my email it shows my 
>domain its getting the keys for:
> > Authentication-Results: mta114.mail.dcn.yahoo.com from=borgnet.us; 
> domainkeys=fail (bad sig)

 From the above, the DK verification was performed by host 
"mta114.mail.dcn.yahoo.com".  The "from" would be the domain signing the mail.

>So If I'm sending from yahoo to here the Authentication-Results should show:
>Authentication-Results: from=yahoo.com; domainkeys=?????
>
>Not borgnet.us as yahoo is doing...

If the borgnet.us host is running dk-milter to do the DK verification, then 
the Authentication-Results: header would show:

   Authentication-Results: borgnet.us; domainkeys=result

The hostname is inserted in that header to tell us who did the 
verification.  Notice that there is no "from=" before the hostname doing 
the verification.

Regards,
-sm