On 10/05/2025 08:23, Ken Biggs via Postfix-users wrote:
Return-Path:<[email protected]>
X-Original-To:[email protected]
Delivered-To:[email protected]
Received: from mail-qk1-f169.google.com (mail-qk1-f169.google.com 
[209.85.222.169])
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384)
(No client certificate requested)
[email protected] (Postfix) with ESMTPS id 1CD1B200DF
for<[email protected]>; Fri,  9 May 2025 15:11:36 -0500 (CDT)
DMARC-Filter: OpenDMARC Filter v1.4.2 yyy.xxx.com 1CD1B200DF
Authentication-Results: OpenDMARC; dmarc=fail (p=none dis=none) 
header.from=gmail.com
DKIM-Filter: OpenDKIM Filter [email protected] 1CD1B200DF
Authentication-Results:[email protected];
dkim=fail reason="signature verification failed" (2048-bit key, unprotected) 
[email protected] header.a=rsa-sha256 header.s=20230601 
header.b=RKA6a/wC
Received: by mail-qk1-f169.google.com with SMTP id 
af79cd13be357-7caea4bc9e9so459125485a.1
         for<[email protected]>; Fri, 09 May 2025 13:11:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
         d=gmail.com; s=20230601; t=1746821496; x=1747426296; darn=xxx.com;
         h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
          :date:message-id:reply-to;
         bh=9WXHEH+Ua31hBu54eP0LWpmaqkIUN2OsJGlLAjtdDlA=;
         b=RKA6a/wCNsjGeWDbSNrfAaEEAk3SM+ehP5vjMGJAD7IzYYj+GOEpedkbtu4T0WnBEx
          3foAEREMpDtru4NrbrBqkGOdLZtgxK41EVDIhfNXLBpb5ZYBGknSeXYbZUZsjQYBKz08
          flhI5hQew5XLSds1L4Opnd7TMdi9C3AEesULC2/Jf82kFgDdmg65EvstfvmF/z1Gn9k3
          qUoe1ubza8D7xaGRyFk7aOmNIlOAPVdr00ZOy9HYXCDHq9703YfINfd9rKBkpcmDbYvm
          qyxRTP9XUW/N1oEjVGOs2zaeOg+EY8P/WWAFg4dw70A8nhcnNKqRtDrRZ+wtwSMP+xUa
          vNKg==

Hi Ken

The order of these headers looks odd to me. It seems to be saying that the DKIM signature was added to the message, then it was passed to a Google MTA, then the DKIM and DMARC Authentication-Results were added, then it was received by your MX server? Have you reordered these headers at all? If so, what was the original order of the headers?

Thanks,

Nick.

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to