Re: [exim] Help sought with fairly complex DKIM set up and F…

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Todd Lyons
Date:  
À: Michael J. Tubby B.Sc. MBCS G8TIC
CC: Exim User List
Sujet: Re: [exim] Help sought with fairly complex DKIM set up and Facebook
On Fri, Feb 28, 2014 at 7:28 AM, Todd Lyons <tlyons@???> wrote:

> You may want to consider implementing DANE, which combines SPF and


Ugh, I meant DMARC!

I am so sorry. I have been working with DANE for a few days and the
wrong acronym flew out of my fingers.

> DKIM. If either SPF or DKIM passes. Your logging clearly indicates
> that the SPF is passing, so those emails would be accepted based on
> DANE instead of rejected based on DKIM.


*DMARC*

>>>> * do I really need to whitelist facebook as a broken DKIM sender to get
>>>> their mail in?
> I think DANE could be the ultimate solution to your problem.


*DMARC*

> But having said that, it would be best to figure out WHY a specific
> sender is failing. Temporarily change the deny to a warn and save a
> few of those messages. If you could send one or more of those


...which is what Phil was describing with the extra router with
"unseen" to save a copy of the message.

...Todd
--
The total budget at all receivers for solving senders' problems is $0.
If you want them to accept your mail and manage it the way you want,
send it the way the spec says to. --John Levine