[dkim-milter-discuss] Verification not failing

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

Hi,

I am extremely stumped by this issue.  Here are some e-mail headers for
an e-mail that is not failing an ADSP check.  My policy is sign
everything.  This mailing list strips the DKIM signature out of the
headers, as you can see.

>From - Sat Jul 25 22:16:57 2009
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <gim...@li...>
Received: from lists.XCF.Berkeley.EDU (lists.XCF.Berkeley.EDU
[128.32.112.242])
	by starfish.lotspeich.org (8.14.3/8.14.3) with ESMTP id n6Q3GCiU004009
	for <er...@lo...>; Sat, 25 Jul 2009 22:16:18 -0500
X-DKIM: Sendmail DKIM Filter v2.8.3 starfish.lotspeich.org n6Q3GCiU004009
Authentication-Results: starfish.lotspeich.org; dkim=none (no signature)
	header.i=unknown; x-dkim-adsp=none
Received: from lists.XCF.Berkeley.EDU (localhost.localdomain [127.0.0.1])
	by lists.XCF.Berkeley.EDU (Postfix) with ESMTP id 3AE41B3D31C;
	Sat, 25 Jul 2009 20:16:07 -0700 (PDT)
X-Original-To: gim...@li...
Delivered-To: gim...@li...
Received: from bc3.EECS.Berkeley.EDU (bc3.EECS.Berkeley.EDU [169.229.60.70])
	by lists.XCF.Berkeley.EDU (Postfix) with ESMTP id 83B8FB3D315
	for <gim...@li...>;
	Sat, 25 Jul 2009 20:16:03 -0700 (PDT)
X-ASG-Debug-ID: 1248578159-702503740000-lZ9FrP
X-Barracuda-URL: http://bc3.eecs.berkeley.edu:8000/cgi-bin/mark.cgi
Received: from starfish.lotspeich.org (localhost [127.0.0.1])
	by bc3.EECS.Berkeley.EDU (Spam & Virus Firewall) with ESMTP id
	E6B201860A4A for <gim...@li...>;
	Sat, 25 Jul 2009 20:16:00 -0700 (PDT)
Received: from starfish.lotspeich.org (mail.lotspeich.org [75.76.192.54]) by
	bc3.EECS.Berkeley.EDU with ESMTP id I6eepISmvYpbWpKh for
	<gim...@li...>;
	Sat, 25 Jul 2009 20:16:00 -0700 (PDT)
X-Barracuda-Envelope-From: er...@lo...
Received-SPF: None (starfish.lotspeich.org: domain of
gim...@li...
	does not designate permitted sender hosts)
	receiver=starfish.lotspeich.org; client-ip=128.32.112.242;
	envelope-from=<gim...@li...>;
helo=lists.XCF.Berkeley.EDU;
Received-SPF: pass (bc3.EECS.Berkeley.EDU: domain of er...@lo...
	designates 75.76.192.54 as permitted sender)
	receiver=bc3.EECS.Berkeley.EDU; client_ip=75.76.192.54;
	envelope-from=er...@lo...;
Received: from [192.168.0.20] ([192.168.0.20]) (authenticated bits=0)
	by starfish.lotspeich.org (8.14.3/8.14.3) with ESMTP id n6Q3Ftss004004
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Sat, 25 Jul 2009 22:15:56 -0500
X-DKIM: Sendmail DKIM Filter v2.8.3 starfish.lotspeich.org n6Q3Ftss004004
X-Barracuda-RBL-IP: 192.168.0.20
Message-ID: <4A6...@lo...>
Date: Sat, 25 Jul 2009 22:15:55 -0500
From: Erik Lotspeich <er...@lo...>
User-Agent: Thunderbird 2.0.0.22 (X11/20090605)
MIME-Version: 1.0
To: Chris Mohler <cr...@gm...>
X-ASG-Orig-Subj: Re: [Gimp-user] Printing issue
References: <4A6...@lo...>	
	<200...@mp...>	
	<4A6...@lo...>
	<acf...@ma...>
In-Reply-To: <acf...@ma...>
X-Enigmail-Version: 0.95.6
X-Barracuda-Connect: mail.lotspeich.org[75.76.192.54]
X-Barracuda-Start-Time: 1248578160
X-Barracuda-Virus-Scanned: by EECS Spam Firewall at EECS.Berkeley.EDU
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=2.0
	QUARANTINE_LEVEL=1000.0 KILL_LEVEL=2.1 tests=DKIM_SIGNED,
	DKIM_VERIFIED
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.409
	Rule breakdown below
	pts rule name              description
	---- ----------------------
	--------------------------------------------------
	-0.00 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
	verification
	0.00 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
Cc: gim...@li..., "Joao S. O. Bueno"
<gw...@mp...>
Subject: Re: [Gimp-user] Printing issue
X-BeenThere: gim...@li...
X-Mailman-Version: 2.1.8
Precedence: list
List-Id: <gimp-user.lists.XCF.Berkeley.EDU>
List-Unsubscribe:
<https://lists.XCF.Berkeley.EDU/mailman/listinfo/gimp-user>,
	<mailto:gim...@li...?subject=unsubscribe>
List-Archive: </lists/gimp-user>
List-Post: <mailto:gim...@li...>
List-Help: <mailto:gim...@li...?subject=help>
List-Subscribe: <https://lists.XCF.Berkeley.EDU/mailman/listinfo/gimp-user>,
	<mailto:gim...@li...?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: gim...@li...
Errors-To: gim...@li...
X-SPF-Scan-By: smf-spf v2.0.2 - http://smfs.sf.net/

Here are the logs in from /var/log/maillog that correspond:

Jul 25 22:16:18 starfish sendmail[4009]: n6Q3GCiU004009:
from=<gim...@li...>, size=6002, class=0,
nrcpts=1, msgid=<4A6...@lo...>, proto=ESMTP,
daemon=MTA, relay=lists.XCF.Berkeley.EDU [128.32.112.242]
Jul 25 22:16:18 starfish sendmail[4009]: n6Q3GCiU004009: Milter add:
header: X-SPF-Scan-By: smf-spf v2.0.2 - http://smfs.sf.net/
Jul 25 22:16:18 starfish sendmail[4009]: n6Q3GCiU004009: Milter add:
header: Received-SPF: None (starfish.lotspeich.org: domain of
gim...@li...\n\tdoes not designate permitted
sender hosts)\n\treceiver=starfish.lotspeich.org;
client-ip=128.32.112.242;\n\tenvelope-from=<gim...@li...>;
helo=lists.XCF.Berkeley.EDU;
Jul 25 22:16:18 starfish dkim-filter[3791]: n6Q3GCiU004009 no signing
domain match for `lists.XCF.Berkeley.EDU'
Jul 25 22:16:18 starfish dkim-filter[3791]: n6Q3GCiU004009 no signing
subdomain match for `lists.XCF.Berkeley.EDU'
Jul 25 22:16:18 starfish dkim-filter[3791]: n6Q3GCiU004009 no signing
keylist match for `gim...@li...'
Jul 25 22:16:18 starfish dkim-filter[3791]: n6Q3GCiU004009 not internal
Jul 25 22:16:18 starfish dkim-filter[3791]: n6Q3GCiU004009 not authenticated
Jul 25 22:16:18 starfish dkim-filter[3791]: n6Q3GCiU004009 mode select:
verifying
Jul 25 22:16:18 starfish sendmail[4009]: n6Q3GCiU004009: Milter insert
(1): header: Authentication-Results:  starfish.lotspeich.org; dkim=none
(no signature)\n\theader.i=unknown; x-dkim-adsp=none
Jul 25 22:16:18 starfish sendmail[4009]: n6Q3GCiU004009: Milter insert
(1): header: X-DKIM:  Sendmail DKIM Filter v2.8.3 starfish.lotspeich.org
n6Q3GCiU004009
Jul 25 22:16:18 starfish dkim-verify[4013]: No signature available
Jul 25 22:16:18 starfish sendmail[4012]: n6Q3GCiU004009:
to=<er...@lo...>, delay=00:00:00, xdelay=00:00:00, mailer=local,
pri=36703, dsn=2.0.0, stat=Sent

The messages that I send to this mailing list also have the DKIM
signature stripped and they fail ADSP, as expected.  I can't figure out
why the messages I send to the gimp-users mailing list don't fail.

I've looked through the code and turned on LogWhy, as you can see, but
nothing jumps out at me.  I know that DKIM uses From instead of the
envelope, but the logs sure seem to indicate it's using the envelope.

Any help would be appreciated -- and satisfy my curiosity!

Thanks!

Regards,

Erik.