[exim] DomainKeys skip signing some emails

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Olivier Bonvalet
Date:  
À: exim-users
Sujet: [exim] DomainKeys skip signing some emails
Hello,

I have a problem while signing emails with domainkey : a lot (30%) of
emails are not signed before the first try, and Yahoo really don't like
this.

From logs, this email is not signed :

2008-08-12 00:00:04 1KSfQq-0004aF-Cd <= ***@domain.tld U=mailer1 P=local
S=48162
2008-08-12 00:00:04 1KSfQq-0004aF-Cd no immediate delivery: load average
2.49
2008-08-12 00:10:49 1KSfQq-0004aF-Cd Spool file is locked (another
process is handling this message)
2008-08-12 00:10:58 1KSfQq-0004aF-Cd SMTP error from remote mail server
after initial connection: host g.mx.mail.yahoo.com [206.190.53.191]: 421
4.7.0 [TS01] Messages from 194.146.226.138 temporarily deferred due to
user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html


But this one is signed :

2008-08-12 00:00:04 1KSfQq-0004Zk-5w <= ***@domain.tld U=mailer1 P=local
S=48222
2008-08-12 00:00:04 1KSfQq-0004Zk-5w no immediate delivery: load average
2.49
2008-08-12 00:03:09 1KSfQq-0004Zk-5w DK: message signed using
a=rsa-sha1; q=dns; c=nofws; s=default; d=radins.com;
h=Received:To:Subject:From:Date:MIME-Version:Content-Type:Message-Id;
2008-08-12 00:03:11 1KSfQq-0004Zk-5w => {a-valid-user}@???
R=dnslookup T=remote_smtp H=g.mx.mail.yahoo.com [209.191.88.239]*
2008-08-12 00:03:11 1KSfQq-0004Zk-5w Completed


Both emails are for a valid user at "yahoo.fr", and from the same local box.


This is the "remote_smtp" transport :
  dk_canon = nofws
  dk_selector = default
  dk_private_key = ${lookup {$domain} nwildlsearch {/etc/exim4/dk/domains} \
                {/etc/exim4/dk/rsa.private.$dk_domain} {0} }


I signed emails only when there are for some destinations (yahoo and
gmail for example).


I used a "customized" amd64 version of the Debian exim4 package (4.68-2
from backports), on which I only enable sqlite and domainkeys.
The libdomainkeys used is the version 0.68-1 : I wasn't able to build an
amd64 package of the version 0.69.

Does the problem is due to my version of libdomainkeys ?

Thanks in advance,
Olivier Bonvalet