-
-
Notifications
You must be signed in to change notification settings - Fork 2k
Open
Labels
area/configuration (file)bug/confirmedA bug report whose bug is confirmedA bug report whose bug is confirmedbug/solution proposedA bug report, whose bug is confirmed, and an unverified solution was proposedA bug report, whose bug is confirmed, and an unverified solution was proposedkind/bug/reportA report about a bugA report about a bugmeta/help wantedThe OP requests help from others - chime in! :DThe OP requests help from others - chime in! :Dservice/postfixservice/security/dkim-dmarc-spfstale-bot/ignoreIndicates that this issue / PR shall not be closed by our stale-checking CIIndicates that this issue / PR shall not be closed by our stale-checking CI
Description
π Preliminary Checks
- I tried searching for an existing issue and followed the debugging docs advice, but still need assistance.
- I will disclose any AI assistance I have used with the information I provide in my report, so that I do not waste the time of humans trying to help me.
π What Happened?
- Issue: DKIM fails at Gmail for Epic/Zeta messages while passing locally; DMARC fails consequently.
- Symptom: Gmail βShow originalβ reports dkim=fail for both selectors and dmarc=fail; Gmail copy lacks two signed headers.
- Troubleshooting steps: Held outbound message (/tmp/epic.clean.lf), verified with opendkim-testmsg; captured Gmail copy (/tmp/epic.gmail.eml); normalized/diffed headers and bodies; computed body hashes.
- Findings: Local copy passes DKIM; body hash matches DKIM bh, so body unchanged; Gmail copy removed signed headers X-Mailer-Info and X-Mailer-Info-Extra (both present in h=), causing DKIM to fail; ARC i=1 on receipt shows DKIM pass, ARC i=2 at Gmail shows DKIM fail; SPF aligns to SRS domain (my domain), so without DKIM, DMARC fails.
π Reproduction Steps
Set up email forwarding to Gmail and have epicgames.com send an email.
It appears that this is responsible for removing the headers causing DKIM to fail:
| /^\s*X-Mailer:/ IGNORE |
π DMS Version
v15.1.0
π» Operating System and Architecture
Ubuntu
βοΈ Container configuration files
π Relevant log output
Metadata
Metadata
Assignees
Labels
area/configuration (file)bug/confirmedA bug report whose bug is confirmedA bug report whose bug is confirmedbug/solution proposedA bug report, whose bug is confirmed, and an unverified solution was proposedA bug report, whose bug is confirmed, and an unverified solution was proposedkind/bug/reportA report about a bugA report about a bugmeta/help wantedThe OP requests help from others - chime in! :DThe OP requests help from others - chime in! :Dservice/postfixservice/security/dkim-dmarc-spfstale-bot/ignoreIndicates that this issue / PR shall not be closed by our stale-checking CIIndicates that this issue / PR shall not be closed by our stale-checking CI