Am 12.11.24 um 16:35 schrieb Jeremy Harris via Exim-users:
Does a run with debug give any better insight? ARC processing uses the acl debug channel, should you want to cut down on the vebiage.
Sadly, it does not.
I've turned on debugging with "control = debug/opts=+acl" but that's not much:
check verify = arc/none:fail:pass
ARC: collecting arc sets
ARC: found AS: ARC-Seal: i=2; a=rsa-sha256; t=1731482228; cv=pass;
d=google.com; s=arc-20240605;
b=lNsOYGOEfzDkTeQylYZNcllC10vzKpD0w7SJz5hu5tdlYbCHYMP17U3qh36SU56wfA
aj7vsF92Q5P0Rjl1ru17wkoVSNZd3Kzd/QplvMleLJ4tpS7P3czT6XPe55xRW6TcgYdZ
NQec0YEKYPS6YaPP51yfRxK3cGx77sMNSxXa/ZRX/L6kUIkHEsC5kKaVETQlbvcRJIyE
Pl6vtlpAVEHXMDgFanjYghxa0e+kw1f4xIkLyCPqAmG5QoEYZszMuClSBKyGCCXnJB5G
FpT+9FdRAGmZxHigjVU/Ayr7EjEW0c0TFJGQBN2YHaNKh54HJR4514unweF+nQfpnind
cUTw==
ARC: new instance 2
ARC: found AMS: ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20240605;
h=organization:subject:from:to:user-agent:mime-version:date
:message-id:dkim-signature:dkim-signature:delivered-to;
bh=9VdWf6jtmakCUhkY8lbs/PvTs01ebna8m7p1quyrmU0=;
fh=oco32Tj+TXoR4082g3e8fiWGLdPBDc8gHnfYNCRiGKg=;
b=j18rooMbdDiuApY2411ufP6EM18Td7PgmddqGOFPGQKKsnu+dyTm6gtqKvcPcQI4nC
+hiEeFOsLHlqxwM/sjzFb/TkfK7kbDLC+Nqvfb2NomoQC/EprflN8MST5KR2j4zX7CVN
Oc0g7yYjytI3L43NYb2lESVvImHGpB2FbpCtfctfa5pHBu1PXN0G0T2X+FiH1ZbBJQ00
z5Xmo/tlh4PLlrYKO4VG5YP310W7+/IOic+l8mYajvBTvAUT0oSmPD6v1liSX+QgiKAQ
lOCkcR1d5uqEKzNZdk2AeftiFlX55JNsWZZyr6pYUf8WuMIeRAFKGEzMU/HfZ4fPQ8ga
3ibw==;
darn=REDACTED
ARC: d tag val
inserting AMS: line parse
ARC verify result fail (collecting headers: inserting AMS)
The corresponding variables:
arc_state = fail , arc_state_reason = collecting headers: inserting AMS ,
arc_domains = ::google.com , arc_oldest_pass = 0
I have enabled ARC verify yesterday and created a Google Mail forward for
testing purposes. Those Google Mails are always in a "fail" state while
mails from other senders (Microsoft, hornetsecurity.com) sometimes also fail
but seem to pass in 95% of all cases.
smime.p7s
Description: Kryptografische S/MIME-Signatur
-- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
