[exim] Re: ARC verify error with mail from Google

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Kai Bojens
Dátum:  
Címzett: exim-users
Tárgy: [exim] Re: ARC verify error with mail from Google
Am 12.11.24 um 16:35 schrieb Jeremy Harris via Exim-users:

> Does a run with debug give any better insight? ARC processing uses
> the acl debug channel, should you want to cut down on the vebiage.

Sadly, it does not.

I've turned on debugging with "control = debug/opts=+acl" but that's not much:

check verify = arc/none:fail:pass
ARC: collecting arc sets
ARC: found AS: ARC-Seal: i=2; a=rsa-sha256; t=1731482228; cv=pass;
         d=google.com; s=arc-20240605;
         b=lNsOYGOEfzDkTeQylYZNcllC10vzKpD0w7SJz5hu5tdlYbCHYMP17U3qh36SU56wfA
          aj7vsF92Q5P0Rjl1ru17wkoVSNZd3Kzd/QplvMleLJ4tpS7P3czT6XPe55xRW6TcgYdZ
          NQec0YEKYPS6YaPP51yfRxK3cGx77sMNSxXa/ZRX/L6kUIkHEsC5kKaVETQlbvcRJIyE
          Pl6vtlpAVEHXMDgFanjYghxa0e+kw1f4xIkLyCPqAmG5QoEYZszMuClSBKyGCCXnJB5G
          FpT+9FdRAGmZxHigjVU/Ayr7EjEW0c0TFJGQBN2YHaNKh54HJR4514unweF+nQfpnind
          cUTw==
ARC: new instance 2
ARC: found AMS: ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
         h=organization:subject:from:to:user-agent:mime-version:date
          :message-id:dkim-signature:dkim-signature:delivered-to;
         bh=9VdWf6jtmakCUhkY8lbs/PvTs01ebna8m7p1quyrmU0=;
         fh=oco32Tj+TXoR4082g3e8fiWGLdPBDc8gHnfYNCRiGKg=;
         b=j18rooMbdDiuApY2411ufP6EM18Td7PgmddqGOFPGQKKsnu+dyTm6gtqKvcPcQI4nC
          +hiEeFOsLHlqxwM/sjzFb/TkfK7kbDLC+Nqvfb2NomoQC/EprflN8MST5KR2j4zX7CVN
          Oc0g7yYjytI3L43NYb2lESVvImHGpB2FbpCtfctfa5pHBu1PXN0G0T2X+FiH1ZbBJQ00
          z5Xmo/tlh4PLlrYKO4VG5YP310W7+/IOic+l8mYajvBTvAUT0oSmPD6v1liSX+QgiKAQ
          lOCkcR1d5uqEKzNZdk2AeftiFlX55JNsWZZyr6pYUf8WuMIeRAFKGEzMU/HfZ4fPQ8ga
          3ibw==;
         darn=REDACTED
ARC: d tag val
inserting AMS: line parse
ARC verify result fail (collecting headers: inserting AMS)

The corresponding variables:

arc_state = fail , arc_state_reason = collecting headers: inserting AMS , arc_domains = ::google.com , arc_oldest_pass = 0

I have enabled ARC verify yesterday and created a Google Mail forward for
testing purposes. Those Google Mails are always in a "fail" state while
mails from other senders (Microsoft, hornetsecurity.com) sometimes also fail
but seem to pass in 95% of all cases.


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/