<div dir="ltr">Hi Daniel,<div><br></div><div>My copy to this list from Gmail:</div><div><br></div><div>Created at: Thu, Dec 23, 2021 at 4:49 PM (Delivered after 6 seconds)<br>From: אורי <<a href="mailto:uri@speedy.net">uri@speedy.net</a>><br>To: Ira Linux Abramov <<a href="mailto:Lists-Linux-IL@ira.abramov.org">Lists-Linux-IL@ira.abramov.org</a>><br>Subject: Re: Got an SPF report, am I reading this right?<br>DKIM: 'FAIL' with domain <a href="http://speedy-net.20210112.gappssmtp.com">speedy-net.20210112.gappssmtp.com</a> Learn more<br></div><div><br></div><div>My copy to another mailing list from Gmail:</div><div><br></div><div>DKIM: 'PASS' with domain <a href="http://googlegroups.com">googlegroups.com</a> Learn more<br></div><div><br></div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="direction:rtl"><div style="direction:rtl">אורי</div><div style="direction:rtl"><a href="mailto:uri@speedy.net" target="_blank">uri@speedy.net</a></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 23, 2021 at 11:03 PM Daniel Shahaf <<a href="mailto:d.s@daniel.shahaf.name">d.s@daniel.shahaf.name</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">אורי wrote on Thu, 23 Dec 2021 14:49 +00:00:<br>
> I suggest that you use/create a Gmail account, send yourself mail the way<br>
> you usually send it and check the headers from there.<br>
<br>
I just did basically that.<br>
<br>
My copy of my post to this list a few minutes ago shows as dkim=fail<br>
on my end. My copy of a post I made to another list a few minutes<br>
before that shows as dkim=pass on my end. By "My copy" I mean the<br>
copy of the post I received through the list. The two posts were sent<br>
the same way.<br>
<br>
I suspect the list's footer breaks the DKIM-Signature body hash (bh=)<br>
verification.<br>
<br>
Cheers,<br>
<br>
Daniel<br>
<br>
> For example if I<br>
> check a mail I receive from my server (sent automatically), I receive<br>
> the following messages:<br>
><br>
> SPF: PASS with IP 69.169.224.10 Learn more<br>
> DKIM: 'PASS' with domain <a href="http://amazonses.com" rel="noreferrer" target="_blank">amazonses.com</a> Learn more<br>
><br>
> You may consider sending your mail via an external email provider, such as<br>
> Amazon SES. I use them and they are very reliable.<br>
><br>
> Thanks,<br>
> אורי<br>
> <a href="mailto:uri@speedy.net" target="_blank">uri@speedy.net</a><br>
><br>
><br>
> On Thu, Dec 23, 2021 at 4:01 PM Ira Linux Abramov <<br>
> <a href="mailto:Lists-Linux-IL@ira.abramov.org" target="_blank">Lists-Linux-IL@ira.abramov.org</a>> wrote:<br>
><br>
>> Hey gang,<br>
>><br>
>> I have added SPF record for my domains about 2 years ago and kinda<br>
>> forgot about it. I get a lot of reports about spam received "from my<br>
>> domain" but not from my servers. almost 50% from google, and I assume<br>
>> that's because half the world in on gmail...<br>
>><br>
>> however today I found a report from an Israeli domain for the first<br>
>> time, the OpenU server sent me the following report and I'm not happy<br>
>> about what I am reading here. if I read it correctly, someone at<br>
>> <a href="http://openu.ac.il" rel="noreferrer" target="_blank">openu.ac.il</a> got an email I sent through this list but it is rejected<br>
>> because the DKIM is broken. If that is true there is something wrong<br>
>> with the way the huji mail server is adding the sig at the bottom, or<br>
>> something else is breaking the message, which suggests using SPF records<br>
>> may be more harmful than helpful, plus the huji server is not configured<br>
>> correctly to prevent DKIM breakage.<br>
>><br>
>> Anyone got insights?<br>
>><br>
>> <?xml version="1.0" encoding="UTF-8" ?><br>
>> <feedback><br>
>> <version>1.0</version><br>
>> <report_metadata><br>
>> <org_name><a href="http://openu.ac.il" rel="noreferrer" target="_blank">openu.ac.il</a></org_name><br>
>> <email><a href="mailto:MAILER-DAEMON@openu.ac.il" target="_blank">MAILER-DAEMON@openu.ac.il</a></email><br>
>> <extra_contact_info></extra_contact_info><br>
>> <report_id>8e1971$6c419ec=<a href="mailto:9144b8f82252374d@openu.ac.il" target="_blank">9144b8f82252374d@openu.ac.il</a></report_id><br>
>> <date_range><br>
>> <begin>1640124003</begin><br>
>> <end>1640210403</end><br>
>> </date_range><br>
>> </report_metadata><br>
>> <policy_published><br>
>> <domain><a href="http://ira.abramov.org" rel="noreferrer" target="_blank">ira.abramov.org</a></domain><br>
>> <adkim>r</adkim><br>
>> <aspf>r</aspf><br>
>> <p>none</p><br>
>> <sp></sp><br>
>> <pct>100</pct><br>
>> </policy_published><br>
>> <record><br>
>> <row><br>
>> <source_ip>132.65.116.210</source_ip><br>
>> <count>1</count><br>
>> <policy_evaluated><br>
>> <disposition>none</disposition><br>
>> <dkim>fail</dkim><br>
>> <spf>fail</spf><br>
>> </policy_evaluated><br>
>> </row><br>
>> <identifiers><br>
>> <header_from><a href="http://ira.abramov.org" rel="noreferrer" target="_blank">ira.abramov.org</a></header_from><br>
>> <envelope_from><a href="http://cs.huji.ac.il" rel="noreferrer" target="_blank">cs.huji.ac.il</a></envelope_from><br>
>> </identifiers><br>
>> <auth_results><br>
>> <dkim><br>
>> <domain><a href="http://ira.abramov.org" rel="noreferrer" target="_blank">ira.abramov.org</a></domain><br>
>> <selector>dkim</selector><br>
>> <result>permerror</result><br>
>> </dkim><br>
>> <spf><br>
>> <domain><a href="http://cs.huji.ac.il" rel="noreferrer" target="_blank">cs.huji.ac.il</a></domain><br>
>> <scope>mfrom</scope><br>
>> <result>none</result><br>
>> </spf><br>
>> </auth_results><br>
>> </record><br>
>> </feedback><br>
>><br>
>> _______________________________________________<br>
>> Linux-il mailing list<br>
>> <a href="mailto:Linux-il@cs.huji.ac.il" target="_blank">Linux-il@cs.huji.ac.il</a><br>
>> <a href="http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il" rel="noreferrer" target="_blank">http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il</a><br>
>><br>
><br>
> _______________________________________________<br>
> Linux-il mailing list<br>
> <a href="mailto:Linux-il@cs.huji.ac.il" target="_blank">Linux-il@cs.huji.ac.il</a><br>
> <a href="http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il" rel="noreferrer" target="_blank">http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il</a><br>
</blockquote></div>