[Mailman-Users] Strange DKIM failure

2021-02-08 Thread nikos

Hello list.

I'm running a Centos 7 mailserver with multiple domains. I create a list 
for one of them and found at code 2 lines of DKIM:


dkim=pass (1024-bit key) header.d=...

dkim=fail reason="signature verification failed" (1024-bit key) header.d=...

I guess that was the reason that many recipients didn't receive any email, 
especially yahoo users.

Why there are 2 lines of Dkim and why the second is fail? SPF and DMARC are 
pass.

Direct email from the same domain users DKIM, SPF, DMARC are pass.

Can someone help me?

Thank you, Nikos.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Strange DKIM failure

2021-02-08 Thread nikos
No, my list is like listn...@domain.com and the sender is like 
u...@domain.com. I have check the host name in the first page of General 
Options Section.
The owner is different, ad...@otherdomain.com, witch is the 
administrator of the mail server.


Thank you for your answer.





On 8/2/2021 1:24 μ.μ., Onyeibo Oku wrote:

On Mon Feb 8, 2021 at 10:46 AM WAT, nikos wrote:

Hello list.

I'm running a Centos 7 mailserver with multiple domains. I create a list
for one of them and found at code 2 lines of DKIM:

dkim=pass (1024-bit key) header.d=...

dkim=fail reason="signature verification failed" (1024-bit key)
header.d=...

I guess that was the reason that many recipients didn't receive any
email, especially yahoo users.

Why there are 2 lines of Dkim and why the second is fail? SPF and DMARC
are pass.

Direct email from the same domain users DKIM, SPF, DMARC are pass.

Can someone help me?

Thank you, Nikos.

Hi Nikos,

Is the domain part of your the address used for the mailing-list the
same as the domain of the direct email?  I had a similar issue when our
direct emails bore something like some...@domain.com while the mailing list bore
listn...@mail.domain.com.

Eventually we had to create SPF, DKIM, DMARC keys/selector specific to
mail.domain.com to solve that.

Regards
Onyeibo


--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Strange DKIM failure

2021-02-08 Thread Onyeibo Oku
On Mon Feb 8, 2021 at 10:46 AM WAT, nikos wrote:
> Hello list.
>
> I'm running a Centos 7 mailserver with multiple domains. I create a list
> for one of them and found at code 2 lines of DKIM:
>
> dkim=pass (1024-bit key) header.d=...
>
> dkim=fail reason="signature verification failed" (1024-bit key)
> header.d=...
>
> I guess that was the reason that many recipients didn't receive any
> email, especially yahoo users.
>
> Why there are 2 lines of Dkim and why the second is fail? SPF and DMARC
> are pass.
>
> Direct email from the same domain users DKIM, SPF, DMARC are pass.
>
> Can someone help me?
>
> Thank you, Nikos.

Hi Nikos,

Is the domain part of your the address used for the mailing-list the
same as the domain of the direct email?  I had a similar issue when our
direct emails bore something like some...@domain.com while the mailing list bore
listn...@mail.domain.com.

Eventually we had to create SPF, DKIM, DMARC keys/selector specific to
mail.domain.com to solve that.

Regards
Onyeibo
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Strange DKIM failure

2021-02-08 Thread Mark Sapiro
On 2/8/21 1:46 AM, nikos wrote:
> Hello list.
> 
> I'm running a Centos 7 mailserver with multiple domains. I create a list
> for one of them and found at code 2 lines of DKIM:
> 
> dkim=pass (1024-bit key) header.d=...
> 
> dkim=fail reason="signature verification failed" (1024-bit key)
> header.d=...
> 
> I guess that was the reason that many recipients didn't receive any
> email, especially yahoo users.
> 
> Why there are 2 lines of Dkim and why the second is fail? SPF and DMARC
> are pass.


Please post all of the headers from the received message, not just these
two partial ones out of context. If you want to munge user and domain
names, you can, but do so in a way that we can tell what's what.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/