#3 Interoperability problem with IronPort
We are running domainkeys milter 1.0.2 and in the past two month we had three separate reports of emails sent from IronPort appliances being rejected due to BAD domainkeys signature.
Tests performed so far are as follows.
- Checked senders DNS records and all appear to be OK
- Asked senders to send to non-sendmail domainkeys verifiers and all tests are OK.
- Asked senders to send to sa-test@sendmail.net and all tests fail with a message "bad signature"
- All senders confirmed to be using IronPort appliances
- Ironport can successfully verify sendmail domainkeys signature
- Asked senders to log a call with Ironport but so far no resolution have been found, in fact IronPort support blames sendmail filter as all other verifiers do not have this problem
At this stage it appears to be a very specific problem between IronPort and Sendmail domainkeys implementation.
Any help in this matter would be greatly appreciated.
Regards,
Vitali
Please attach a sample signed message which fails to verify.
Sender Auth autoresponse with a test message
That message appears to be in some format I can't read. It's mostly binary data.
Please attach something in cleartext, or better yet something gzipped to preserve CRLF and such.
Headers of the dk failed message
Body of the dk failed message
Please, find body and headers of the dk-failed message attached.
These files are clear text.
The original attachment is in msg format (MS Outlook message format) and is most likely a binary.
It may be opened using some perl script http://wiki.sabayonlinux.org/index.php?title=HOWTO:_Read_Microsoft_Outlook_.MSG_files_in_Linux.
Thank you for your assistance.