HI Nick, I had cut and pasted from the "Raw Source" view in mac Mail, but double checked in the spool file and those are the headers received in that order.
Thanks, Ken > On May 9, 2025, at 7:27 PM, Nick Tait via Postfix-users > <[email protected]> wrote: > > On 10/05/2025 08:23, Ken Biggs via Postfix-users wrote: >> Return-Path:<[email protected]> >> X-Original-To:[email protected] >> Delivered-To:[email protected] >> Received: from mail-qk1-f169.google.com (mail-qk1-f169.google.com >> [209.85.222.169]) >> (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) >> key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) >> (No client certificate requested) >> [email protected] (Postfix) with ESMTPS id 1CD1B200DF >> for<[email protected]>; Fri, 9 May 2025 15:11:36 -0500 (CDT) >> DMARC-Filter: OpenDMARC Filter v1.4.2 yyy.xxx.com 1CD1B200DF >> Authentication-Results: OpenDMARC; dmarc=fail (p=none dis=none) >> header.from=gmail.com >> DKIM-Filter: OpenDKIM Filter [email protected] 1CD1B200DF >> Authentication-Results:[email protected]; >> dkim=fail reason="signature verification failed" (2048-bit key, unprotected) >> [email protected] header.a=rsa-sha256 header.s=20230601 >> header.b=RKA6a/wC >> Received: by mail-qk1-f169.google.com with SMTP id >> af79cd13be357-7caea4bc9e9so459125485a.1 >> for<[email protected]>; Fri, 09 May 2025 13:11:36 -0700 (PDT) >> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; >> d=gmail.com; s=20230601; t=1746821496; x=1747426296; darn=xxx.com; >> h=to:subject:message-id:date:from:mime-version:from:to:cc:subject >> :date:message-id:reply-to; >> bh=9WXHEH+Ua31hBu54eP0LWpmaqkIUN2OsJGlLAjtdDlA=; >> b=RKA6a/wCNsjGeWDbSNrfAaEEAk3SM+ehP5vjMGJAD7IzYYj+GOEpedkbtu4T0WnBEx >> 3foAEREMpDtru4NrbrBqkGOdLZtgxK41EVDIhfNXLBpb5ZYBGknSeXYbZUZsjQYBKz08 >> flhI5hQew5XLSds1L4Opnd7TMdi9C3AEesULC2/Jf82kFgDdmg65EvstfvmF/z1Gn9k3 >> qUoe1ubza8D7xaGRyFk7aOmNIlOAPVdr00ZOy9HYXCDHq9703YfINfd9rKBkpcmDbYvm >> qyxRTP9XUW/N1oEjVGOs2zaeOg+EY8P/WWAFg4dw70A8nhcnNKqRtDrRZ+wtwSMP+xUa >> vNKg== > > Hi Ken > > The order of these headers looks odd to me. It seems to be saying that the > DKIM signature was added to the message, then it was passed to a Google MTA, > then the DKIM and DMARC Authentication-Results were added, then it was > received by your MX server? Have you reordered these headers at all? If so, > what was the original order of the headers? > > Thanks, > > Nick. > > _______________________________________________ > Postfix-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
