Postfix und SRS

[Thomas Plant]

Am 15.05.2020 um 13:26 schrieb Andreas Pothe:
> Hallo,
>
> wer auch immer dieser "Thomas" ist. Deine Nachrichten werden hier
> abgelehnt, da Deine DKIM-Signatur nicht in Ordnung ist ("fail") und
> deine DMARC-Policy sagt, dass man in diesem Fall die Nachricht ablehnen
> soll.
>
>
> May 15 13:15:19 mail postfix/smtpd[5232]: connect from
> listi.jpberlin.de[91.198.250.5]
> May 15 13:15:19 mail postfix/smtpd[5232]: Anonymous TLS connection
> established from listi.jpberlin.de[91.198.250.5]: TLSv1.2 with cipher
> ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
> May 15 13:15:20 mail postfix/smtpd[5232]: 09EE31F478:
> client=listi.jpberlin.de[91.198.250.5]
> May 15 13:15:20 mail postfix/cleanup[5238]: 09EE31F478:
> message-id=<4053572f-0e7a-d57c-ab01-01fd08ab1629 at plant.systems>
> May 15 13:15:20 mail opendkim[2766]: 09EE31F478: listi.jpberlin.de
> [91.198.250.5] not internal
> May 15 13:15:20 mail opendkim[2766]: 09EE31F478: not authenticated
> May 15 13:15:20 mail opendkim[2766]: 09EE31F478: s=2018-10
> d=plant.systems SSL error:04091068:rsa routines:int_rsa_verify:bad signature
> May 15 13:15:20 mail opendkim[2766]: 09EE31F478: bad signature data
> May 15 13:15:20 mail opendmarc[2753]: 09EE31F478 ignoring
> Authentication-Results at 29 from ORIGINATING
> May 15 13:15:20 mail opendmarc[2753]: 09EE31F478: SPF(mailfrom):
> postfixbuch-users-bounces at listen.jpberlin.de pass
> May 15 13:15:20 mail opendmarc[2753]: 09EE31F478: plant.systems fail
> May 15 13:15:20 mail postfix/cleanup[5238]: 09EE31F478: milter-reject:
> END-OF-MESSAGE from listi.jpberlin.de[91.198.250.5]: 5.7.1 rejected by
> DMARC policy for plant.systems;
> from=<postfixbuch-users-bounces at listen.jpberlin.de>
> to=<mailinglisten at pothe.de> proto=ESMTP helo=<listi.jpberlin.de>
> May 15 13:15:20 mail postfix/smtpd[5232]: disconnect from
> listi.jpberlin.de[91.198.250.5] ehlo=2 starttls=1 mail=1 rcpt=1 data=0/1
> quit=1 commands=6/7
>
> CU
> Andreas
>

Hmmm, Google, MXToolBox, https://appmaildev.com/en/dkim und mail-tester.com haben keine Probleme mit meinem
DKIM Setup.

https://www.mail-tester.com/test-tl86y9wxg

Header aus Gmail:
Authentication-Results: mx.google.com;
dkim=pass header.i=@plant.systems header.s=2018-10 header.b=wsXS3LPd;
arc=pass (i=1); spf=pass (google.com: domain of thomas at plant.systems
designates 2a02:c207:2027:430::1 as permitted sender)
smtp.mailfrom=thomas at plant.systems; dmarc=pass (p=REJECT sp=REJECT
dis=NONE) header.from=plant.systems

-------------- nächster Teil --------------
certbot-auto certonly --cert-name smgw7.zcom.it --preferred-challenges=dns --manual --manual-auth-hook /root/letsencrypt/auth.sh --manual-cleanup-hook /root/letsencrypt/cleanup.sh -d smgw7.zcom.it,srv1.mf.zcom.it,srv2.mf.zcom.it,srv3.mf.zcom.it



certbot-auto certonly --preferred-challenges=dns --manual --manual-auth-hook /root/letsencrypt/auth.sh --manual-cleanup-hook /root/letsencrypt/cleanup.sh -d