Re: [exim] dkim=fail (body hash mismatch; body probably mod…

Top Page
Delete this message
Reply to this message
Author: Victor Sudakov
Date:  
To: exim-users
Subject: Re: [exim] dkim=fail (body hash mismatch; body probably modified in transit)
Andrew C Aitchison via Exim-users wrote:
>
> > Slavko via Exim-users wrote:
> >> Dňa 9. 12. o 8:49 Victor Sudakov via Exim-users napísal(a):
> >>> Slavko via Exim-users wrote:
> >>>> Dňa 9. 12. o 5:15 Victor Sudakov via Exim-users napísal(a):
> >>>>
> >>>>> I've just sent two messages to you with Message-IDs <E1p3Uk1-000J4G-3I@???> and <E1p3UkO-000J4r-DZ@???>
> >>>>
> >>>> I got both and both has DKIM=pass in both, the exim (4.94.2) and rspamd
> >>>
> >>> What OS is exim running on?
> >>>
> >>>
> >>
> >> I am sorry, Debian bullseye (stable), exim is from debian repo, rspamd
> >> is from its repo, no own builds.
> >
> > So, if we both have Debian Bullseye and the stock exim, what could
> > make the difference?
>
> IIRC Debian has two versions of exim: light and heavy,


That is what I have installed:

$ apt list --installed | grep exim

exim4-base/stable,now 4.94.2-7 amd64 [installed,automatic]
exim4-config/stable,now 4.94.2-7 all [installed,automatic]
exim4-daemon-heavy/stable,now 4.94.2-7 amd64 [installed]

> and "split" and "non-split" config files.


I'm using a single /etc/exim4/exim4.conf file as I have a FreeBSD
background and am used to a single exim config. In fact, I hate the
split stuff very much.

I guess there is not much to configure for DKIM checking, it's
basically

"acl_smtp_dkim = acl_check_dkim" and then

begin acl

acl_check_dkim:
   accept add_header      = :at_start:${authresults {$primary_hostname}}


acl ...


--
Victor Sudakov VAS4-RIPE
http://vas.tomsk.ru/
2:5005/49@fidonet