DKIM failed

Jürgen Depicker Jurgen.Depicker at let.be
Mon Jan 31 13:21:32 UTC 2022


>On Mon, Jan 31, 2022 at 11:48:21AM +0000, Jürgen Depicker wrote:
>> Hello,
>> 
>> I wonder whether someone might be able to disable DKIM for lists.ubuntu.com, or add the correct public key to DNS for DKIM to work?  It seems DKIM is switched on, but not configured properly.  All your mails now end up in quarantine, which is a pitty (I release them, but it's annoying).  https://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhelp.ubuntu.com%2Fcommunity%2FPostfix%2FDKIM%23Configuration&data=04%7C01%7CJurgen.Depicker%40let.be%7Cb50f623e737d46f5bed408d9e4b7dd51%7C67922e7cdb1a46828aea653a0b4953df%7C0%7C0%7C637792300613290030%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=OZQn%2Bhth1yYMWGrYb%2FeBPrxRUTgfA7LdtRgsCiyXKhk%3D&reserved=0 has things documented well it seems ;-).
>
>Please could you be more specific? What exactly are you saying is misconfigured? What do you mean exactly by "disable DKIM for lists.ubuntu.com"? I don't think the list software adds DKIM headers.
>Isn't that up to the original sender? So I don't understand what public key you'd expect to add where.

Hi Robie,
I'm not an expert, sorry, but it seems the mails sent by the list server have something wrongly configured: if we check the mail header (mail attached) with https://mha.azurewebsites.net/ it shows there's an invalid DKIM body hash.  
Also: 
"smtp.mailfrom=lists.ubuntu.com; dkim=fail (signature did not verify)"
"gw000080-eu.fortimail.com; dkim=fail (body hash did not verify) header.i=@canonical.com; dmarc=fail header.from=canonical.com"

Kind regards,
Jürgen
-------------- next part --------------
An embedded message was scrubbed...
From: <robie.basak at canonical.com>
Subject: [*fortimail - DKIM Failed*] ~ubuntu-server subscription changes
Date: Mon, 31 Jan 2022 09:01:25 +0100
Size: 11817
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20220131/69641845/attachment-0001.mht>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6007 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20220131/69641845/attachment-0001.bin>


More information about the ubuntu-server mailing list