Hi!
Jusy sent message with required size from Gmail and found that message
contains two DKIM signatures: first from gmail.com and second from
1e100.net domain. Seems we are have problems at Google side.
Here is headers at my side.
Return-path: <max.kostikov@???>
Envelope-to: max@???
Delivery-date: Sun, 15 Jan 2017 20:56:51 +0200
Received: from mailnull by beta.peek.ru with sa-checked (Exim 4.88
(FreeBSD))
(envelope-from <max.kostikov@???>)
id 1cSpyb-000LfE-M0
for max@???; Sun, 15 Jan 2017 20:56:51 +0200
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on beta.peek.ru
X-Spam-Status: No, score=-7.5 required=5.0 tests=BAYES_00,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,
SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.1
X-Spam-Report:
* -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at
http://www.dnswl.org/, low
* trust
* [2a00:1450:4010:c07:0:0:0:236 listed in]
[list.dnswl.org]
* 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
* (max.kostikov[at]gmail.com)
* -0.0 SPF_PASS SPF: sender matches SPF record
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
* [score: 0.0000]
* 0.0 HTML_MESSAGE BODY: HTML included in message
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK
signature
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's
* domain
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessarily
* valid
* -4.8 TXREP TXREP: Score normalizing based on sender's reputation
Received: from mail-lf0-x236.google.com ([2a00:1450:4010:c07::236])
by beta.peek.ru with esmtps
(TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88 (FreeBSD))
(envelope-from <max.kostikov@???>)
id 1cSpyW-000Lf9-7x
for max@???; Sun, 15 Jan 2017 20:56:25 +0200
Received: by mail-lf0-x236.google.com with SMTP id z134so64919414lff.3
for <max@???>; Sun, 15 Jan 2017 10:56:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=bTmQU7JxegadQqBrg/V9Xn2+Orvo9uWoLUJyXUzv91E=;
b=mDvVf51OjETsvRPLtc8o6KyHDRomdMptsTfM1YF66tY8VS7d7yqfC2lPD0MZDvd8hW
hLnKEhdV7ToZm4YA/j8tqi3cb/KXwvWMhET8w1nlXGCraCuFSEzflDcuRMolANSQ+/nc
t2WnHAv/5JlbmMPtI5TBne7i2Ptf1Z+HXx2sC+8S0g/CqEIAsC4Af76DI0HgDQa9fg74
wYnnQoPSCGGzTD9OS1p+A2j5I3EO6O/kW89KB/MN3TABw4AuzLMwwYPHhbLkuQnbLCEl
GKimyYu+KVR67D7zcetef/BgPyldl+yZo3Sfo/xz9iwbkhf+WazvzTyCrE2i8wlBdGtV
peJw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=bTmQU7JxegadQqBrg/V9Xn2+Orvo9uWoLUJyXUzv91E=;
b=GMyT1S+NTf0GXMqCpIejjhbYjzIUa/urvGVThcLhmcr8vVkoUozmudzGs/Us9a3oHd
zbq6HsKk33i/8MpvlWYjzPEPrSuci/2gGczUhPtW/cFoaQ8bdqT2lrvIrnKAwPar5h92
+vBcpsdRKOsaBmYME+k1+nj4wQhbXc9YBjePIggLLogFfaqvPXCf749aCWCSigM8raXf
YiRmCtc34HUPGEr/qiuYWCLDle8nHB/AaORaGu5w8bgPoUILwuwCxgPmYMcVdkqSRfHG
HinoW6tEcgOfDRqXanhfe+nJglSdQMgcTSXnDwP+C3KFQ0780cgXiqRJHIT9vP3rTm/6
6hMg==
X-Gm-Message-State:
AIkVDXKTEr1rIcT/thdTpuCLGu5w9y/Xj/ogjJuatY/KeSuObz/vzFP/WkysNv8q4wD1Q2XFeYtWQiesokE4HA==
X-Received: by 10.46.75.18 with SMTP id
y18mr12129199lja.68.1484506572210;
Sun, 15 Jan 2017 10:56:12 -0800 (PST)
MIME-Version: 1.0
Received: by 10.25.211.197 with HTTP; Sun, 15 Jan 2017 10:56:11 -0800
(PST)
From: Maxim Kostikov <max.kostikov@???>
Date: Sun, 15 Jan 2017 20:56:11 +0200
Message-ID:
<CAD2B=jf1oRYJKCTMACryrbDGsy6KyvG8Bxaywzaf2thCUGBeag@???>
Subject: DKIM test
To: "Maxim V. Kostikov" <max@???>
Content-Type: multipart/alternative;
boundary=f403045ea760e747b50546269e25
Received-SPF: pass (beta.peek.ru: domain of gmail.com designates
2a00:1450:4010:c07::236 as permitted sender)
client-ip=2a00:1450:4010:c07::236; envelope-from=max.kostikov@???;
helo=mail-lf0-x236.google.com;
X-DCC--Metrics: beta.peek.ru 1480; Body=1 Fuz1=1
Authentication-Results: beta.peek.ru; dmarc=pass header.from=gmail.com
(p=none, pct=)
X-Exim-Spam-Score: 30
X-Exim-Spam-Legend: DKIMFL(30) DKIM signature failed
(bodyhash_mismatch);
Ivo Truxa писал 2017-01-15 01:07:
I am getting closer to localize the problem. Now I can reliably
reproduce the DKIM failure - it is enough to send an email from Gmail
with the body size (may include an attachment) bigger than 65536 bytes
(the size of an unsigned short integer).
...
I would appreciate if others could try sending themselves an email
from Gmail bigger than the threshold, and told me whether they get the
same result (bodyhash mismatch). If not, then it might be a platform
dependent problem.
--
With best regards,
Max Kostikov
BBM: 24CA5DF8 | W:
https://kostikov.co
