Am 12.11.24 um 16:35 schrieb Jeremy Harris via Exim-users:
> Does a run with debug give any better insight? ARC processing uses
> the acl debug channel, should you want to cut down on the vebiage.
Sadly, it does not.
I've turned on debugging with "control = debug/opts=+acl" but that's not much:
check verify = arc/none:fail:pass
ARC: collecting arc sets
ARC: found AS: ARC-Seal: i=2; a=rsa-sha256; t=1731482228; cv=pass;
d=google.com; s=arc-20240605;
b=lNsOYGOEfzDkTeQylYZNcllC10vzKpD0w7SJz5hu5tdlYbCHYMP17U3qh36SU56wfA
aj7vsF92Q5P0Rjl1ru17wkoVSNZd3Kzd/QplvMleLJ4tpS7P3czT6XPe55xRW6TcgYdZ
NQec0YEKYPS6YaPP51yfRxK3cGx77sMNSxXa/ZRX/L6kUIkHEsC5kKaVETQlbvcRJIyE
Pl6vtlpAVEHXMDgFanjYghxa0e+kw1f4xIkLyCPqAmG5QoEYZszMuClSBKyGCCXnJB5G
FpT+9FdRAGmZxHigjVU/Ayr7EjEW0c0TFJGQBN2YHaNKh54HJR4514unweF+nQfpnind
cUTw==
ARC: new instance 2
ARC: found AMS: ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=organization:subject:from:to:user-agent:mime-version:date
:message-id:dkim-signature:dkim-signature:delivered-to;
bh=9VdWf6jtmakCUhkY8lbs/PvTs01ebna8m7p1quyrmU0=;
fh=oco32Tj+TXoR4082g3e8fiWGLdPBDc8gHnfYNCRiGKg=;
b=j18rooMbdDiuApY2411ufP6EM18Td7PgmddqGOFPGQKKsnu+dyTm6gtqKvcPcQI4nC
+hiEeFOsLHlqxwM/sjzFb/TkfK7kbDLC+Nqvfb2NomoQC/EprflN8MST5KR2j4zX7CVN
Oc0g7yYjytI3L43NYb2lESVvImHGpB2FbpCtfctfa5pHBu1PXN0G0T2X+FiH1ZbBJQ00
z5Xmo/tlh4PLlrYKO4VG5YP310W7+/IOic+l8mYajvBTvAUT0oSmPD6v1liSX+QgiKAQ
lOCkcR1d5uqEKzNZdk2AeftiFlX55JNsWZZyr6pYUf8WuMIeRAFKGEzMU/HfZ4fPQ8ga
3ibw==;
darn=REDACTED
ARC: d tag val
inserting AMS: line parse
ARC verify result fail (collecting headers: inserting AMS)
The corresponding variables:
arc_state = fail , arc_state_reason = collecting headers: inserting AMS , arc_domains = ::google.com , arc_oldest_pass = 0
I have enabled ARC verify yesterday and created a Google Mail forward for
testing purposes. Those Google Mails are always in a "fail" state while
mails from other senders (Microsoft, hornetsecurity.com) sometimes also fail
but seem to pass in 95% of all cases.
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/