Aw: Re: Issues with the dmarc/dkim plugins

[email protected] ("Hans Salvisberg") Sun, 4 Jan 2015 18:34:40 +0100
Newsgroups	perl.qpsmtpd
Message-ID	<trinity-47c15777-4767-45ad-aa8a-695e3c7b65a9-1420392880058@3capp-gmx-bs12>
<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>I&#39;ve set rlimit_as=UNLIMITED (8GB in the host) and this hasn&#39;t made any difference.</div>

<div>&nbsp;</div>

<div>Actually, the culprit is not dkim but dmarc. Commenting out dmarc lets the mails come in.</div>

<div>&nbsp;</div>

<div>(I can&#39;t try it the other way around, because dmarc crashes if dkim isn&#39;t active.)</div>

<div>&nbsp;</div>

<div>Hans</div>

<div>&nbsp;
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Gesendet:</b>&nbsp;Sonntag, 04. Januar 2015 um 03:21 Uhr<br/>
<b>Von:</b>&nbsp;&quot;Matt Simerson&quot; &lt;[email protected]&gt;<br/>
<b>An:</b>&nbsp;&quot;[email protected]&quot; &lt;[email protected]&gt;<br/>
<b>Cc:</b>&nbsp;&quot;[email protected]&quot; &lt;[email protected]&gt;<br/>
<b>Betreff:</b>&nbsp;Re: Issues with the dmarc/dkim plugins</div>

<div name="quoted-content">DKIM needs more RAM, bump up to at least 256MB.<br/>
<br/>
Matt<br/>
<br/>
<br/>
<br/>
&gt; On Jan 3, 2015, at 5:10 PM, [email protected] wrote:<br/>
&gt;<br/>
&gt; I&#39;m having a fatal issue with the dmarc plugin: when it&#39;s enabled then I get &quot;Out of memory!&quot; when trying to receive mail from<br/>
&gt; -- gmail<br/>
&gt; -- [email protected]<br/>
&gt; -- [email protected]<br/>
&gt;<br/>
&gt; I&#39;m not passing any parameters to dmarc, and upping the memory limit from 128MB to 196MB in the xinetd configuration file has not made any difference. This occurs with all of the following versions:<br/>
&gt; -- ee01a07 (2014-12-22 15:01:12 -0800),<br/>
&gt; -- a515e2b (2014-12-30 13:58:21 -0800), and<br/>
&gt; -- HEAD<br/>
&gt;<br/>
&gt;<br/>
&gt; Seeing that there were changes in dkim/dmarc between ee01a07 and a515e2b, I&#39;ve decided to try the latter and that one still advertises &quot;AUTH&quot;. This puts the AUTH breakage into the last 10 commits.<br/>
&gt;<br/>
&gt;<br/>
&gt; There&#39;s a minor issue with dkim, too: [email protected] reports &quot;permerror (no usable key records)&quot;. However, it also says:<br/>
&gt;<br/>
&gt; NOTE: DKIM checking has been performed based on the latest DKIM specs<br/>
&gt; (RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for<br/>
&gt; older versions. If you are using Port25&#39;s PowerMTA, you need to use<br/>
&gt; version 3.2r11 or later to get a compatible version of DKIM.<br/>
&gt;<br/>
&gt; The other two test hosts say &quot;pass&quot;, so I&#39;m not sure where the problem is.</div>
</div>
</div>
</div></div></body></html>