Share

domainkeys-milter

Tracker: Support Requests

5 Interoperability problem with IronPort - ID: 2778291
Last Update: Comment added ( vparkhom )

We are running domainkeys milter 1.0.2 and in the past two month we had
three separate reports of emails sent from IronPort appliances being
rejected due to BAD domainkeys signature.
Tests performed so far are as follows.
- Checked senders DNS records and all appear to be OK
- Asked senders to send to non-sendmail domainkeys verifiers and all tests
are OK.
- Asked senders to send to sa-test@sendmail.net and all tests fail with a
message "bad signature"
- All senders confirmed to be using IronPort appliances
- Ironport can successfully verify sendmail domainkeys signature
- Asked senders to log a call with Ironport but so far no resolution have
been found, in fact IronPort support blames sendmail filter as all other
verifiers do not have this problem

At this stage it appears to be a very specific problem between IronPort and
Sendmail domainkeys implementation.
Any help in this matter would be greatly appreciated.

Regards,
Vitali


vparkhom ( vparkhom ) - 2009-04-22 03:16

5

Open

None

Nobody/Anonymous

Other

v1.0.2

Public


Comments ( 3 )

Date: 2009-06-01 05:16
Sender: vparkhom

Please, find body and headers of the dk-failed message attached.
These files are clear text.

The original attachment is in msg format (MS Outlook message format) and
is most likely a binary.
It may be opened using some perl script
http://wiki.sabayonlinux.org/index.php?title=HOWTO:_Read_Microsoft_Outlook_.MSG_files_in_Linux.

Thank you for your assistance.



Date: 2009-06-01 00:43
Sender: sm-mskProject AdminAccepting Donations

That message appears to be in some format I can't read. It's mostly binary
data.

Please attach something in cleartext, or better yet something gzipped to
preserve CRLF and such.


Date: 2009-04-22 04:11
Sender: sm-mskProject AdminAccepting Donations

Please attach a sample signed message which fails to verify.


Attached Files ( 3 )

Filename Description Download
headers.txt Headers of the dk failed message Download
body.txt Body of the dk failed message Download
Sender Auth autoresponse.msg Sender Auth autoresponse with a test message Download

Changes ( 12 )

Field Old Value Date By
close_date 2009-06-01 00:43 2009-06-01 05:16 vparkhom
status_id Pending 2009-06-01 05:16 vparkhom
File Added 329116: body.txt 2009-06-01 05:12 vparkhom
File Added 329115: headers.txt 2009-06-01 05:11 vparkhom
status_id Open 2009-06-01 00:43 sm-msk
close_date - 2009-06-01 00:43 sm-msk
status_id Pending 2009-04-22 04:43 vparkhom
close_date 2009-04-22 04:11 2009-04-22 04:43 vparkhom
File Added 323882: Sender Auth autoresponse.msg 2009-04-22 04:40 vparkhom
artifact_group_id None 2009-04-22 04:11 sm-msk
status_id Open 2009-04-22 04:11 sm-msk
close_date - 2009-04-22 04:11 sm-msk