Re: [exim] dkim error in paniclog

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Kerstin Espey
Date:  
À: exim-users
CC: Tom Kistner
Sujet: Re: [exim] dkim error in paniclog
Am Donnerstag 03 Dezember 2009 schrieb Tom Kistner:
[...]
> >
> > Unfortunately, I don't have access to the headers, as the mails get
> > delivered to our customers.
>
> Can you send me the envelope sender for a few of those samples, or
> better, log the DKIM-Signature header and send that to me?


Am I right, there is no log_selector to log the dkim-header?
I have added this to acl_smtp_data

warn condition = ${if def:h_dkim-signature:}
        log_message = DKIM-Signature $h_dkim-signature


but it does not log any signature.
>
> If possible, please intercept samples and re-run them through an Exim
> session with debug output enabled. If the sample(s) do not contain
> sensitive data, you can also send them to me for analysis.
>

This is really difficult, as german data protection law is very strict.

The last occurence was 2009-12-03 23:07:43.

These are some logs:

2009-12-02 08:43:57 1NFjsT-0000Jz-11 DKIM: Error while running this
message through validation, disabling signature verification.
2009-12-02 08:43:57 1NFjsT-0000Jz-11 <= root@???
H=(eu1.dbware.biz) [89.149.229.200] P=esmtp S=30278 for
user@???
2009-12-02 08:43:57 1NFjsT-0000Jz-11 =>
user@??? (user@???,
user@???) <user@???> R=spamd_smart_route
T=intern_smtp H=192.168.111.124 [192.168.111.124] C="250 OK
id=1NFjsT-0002a5-OH"
2009-12-02 08:43:57 1NFjsT-0000Jz-11 Completed

2009-12-02 11:01:03 1NFm17-00079m-VR DKIM: Error while running this
message through validation, disabling signature verification.
2009-12-02 11:01:05 1NFm17-00079m-VR <= events@???
H=web06.empirion.at [80.245.192.121] P=esmtp S=39495
id=9B57B214930D47BB861B26C9CB42E2C2@??? for glenz@???
2009-12-02 11:01:06 1NFm17-00079m-VR => user@???
(user@???) <user@???> R=spamd_smart_route
T=intern_smtp H=192.168.111.124 [192.168.111.124] C="250 OK
id=1NFm1C-0006S9-22"
2009-12-02 11:01:06 1NFm17-00079m-VR Completed

2009-12-02 11:05:57 1NFm5t-00080t-RD DKIM: Error while running this
message through validation, disabling signature verification.
2009-12-02 11:05:58 1NFm5t-00080t-RD <=
bounceind17@??? H=s15223426.onlinehome-server.info
(s15223426) [87.106.25.17] P=esmtp S=23171
id=20091202110557.416498156@??? for
user@???
2009-12-02 11:05:58 1NFm5t-00080t-RD =>
user@??? (user@???)
<user@???> R=spamd_smart_route T=intern_smtp
H=192.168.111.27 [192.168.111.27] C="250 OK id=1NFm5u-0003xF-OL"
2009-12-02 11:05:58 1NFm5t-00080t-RD Completed

2009-12-02 11:09:38 1NFm9S-0008KI-82 DKIM: Error while running this
message through validation, disabling signature verification.
2009-12-02 11:09:39 1NFm9S-0008KI-82 <= bounces@???
H=ks355456.kimsufi.com [91.121.123.159] P=esmtp S=25316
id=20091202101320.22410.qmail@??? for user@???
2009-12-02 11:09:39 1NFm9S-0008KI-82 => user@???
(user@???) <user@???> R=spamd_smart_route
T=intern_smtp H=192.168.111.27 [192.168.111.27] C="250 OK
id=1NFm9T-0004Gb-4Y"
2009-12-02 11:09:39 1NFm9S-0008KI-82 Completed

2009-12-02 13:13:33 1NFo5M-00050q-Vg DKIM: Error while running this
message through validation, disabling signature verification.
2009-12-02 13:13:33 1NFo5M-00050q-Vg <= dell_technical_updates@???
H=s15324915.onlinehome-server.info (s15324915) [87.106.249.175] P=esmtp
S=141639 id=AUSOLADPPROC1a8160ab4fc6f4c4bb2aa6b97e5f493de@AUSOLADPPROC1
for user@???
2009-12-02 13:13:34 1NFo5M-00050q-Vg =>
user@??? (user@???)
<user@???> R=spamd_smart_route T=intern_smtp
H=192.168.111.124 [192.168.111.124] C="250 OK id=1NFo5O-0000oj-4L"
2009-12-02 13:13:34 1NFo5M-00050q-Vg Completed


--

Regards, Kerstin