[pfx] Re: dkim and meddlesome (?) relay-hosts

Den 06.05.2026 21:24, skrev Håkon Alstadheim via Postfix-users:
> I am having trouble that mail to some recipients from an outlook user 
> is getting DKIM fail. I /believe/ (*) this is because a header with an 
> empth first line, like:
>
> >  References:
> > <CABW_NmRFFV9cx-XfrQjWBBAzDDaBZgr_8bhqCb7mFM_Yg+M-8A@mail.gmail.com>
> >   <[email protected]>
>
> is "fixed" by upstream to not start with an empty line, thus breaking 
> dkim signing. Mail leaving my host has DKIM signature containing:
>
> [...]References:=0D=0A=09<CABW_NmRF[...]
>
> Putting a header_checks with "/^References:[\x0a\x0d\x09\x20]+(.*)/ 
> REPLACE References: $1" seems to have fixed dkim-signing, but I've 
> noticed that attached ("nested") emails also get edited, and I'd like 
> to *only* edit the actual message headers, leaving attachments alone. 
> Anybody have a recipe for that?
>
> * Note: I don't *know* that I'm on the right track here. I've had 
> trouble getting hold of mails as they look at the receiving end, and 
> not all mails fail, maybe because the headers don't have empty lines, 
> maybe because I'm totally wrong in my understanding.
>
Post-mortem and summary:

I need relaxed/relaxed alignment with the signature (and various other 
clean-up).

I actually *had* that, but during upgrades of my debian system, the 
outgoing opendkim process lost its configuration-file command-line 
option, and reverted to an old config, which was simply *wrong*.

Moral: Try to avoid custom init-scripts, at least when you only visit 
them once every five years.

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]