Mailscanner disturbs my domainkey?

[Lars Kristiansen]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

> I've added domainkeys with dk-milter to sendmail.
>
> The verifier at http://senderid.espcoalition.org/ shows the signature is
> there, but it does not verify.
>
> Is mailscanner messing up the headers so the signature is wrong?

According to the rfc,
[ http://www.ietf.org/internet-drafts/draft-delany-domainkeys-base-02.txt ]
, it is a signature of the mail, including the headers below the
DomainKey-Signature.
As far as I can understand new headers need to be put before the signature
not to conflict.


--
Lars


>
> 8uye at senderid.espcoalition.org
>
> The verifier says: DomainKey-Status: bad: Signature failed verification
>
> DomainKey-Signature: a=rsa-sha1; s=arnold; d=neland.dk; c=nofws; q=dns;
> 	h=message-id:from:to:subject:date:mime-version:content-type:
> 	content-transfer-encoding:x-priority:x-msmail-priority:x-mailer:x-mimeole;
> 	b=KqKCCl3LSAL7ztA0QktPMHZSMnAbwwRYUeMJWowfD0SZt5PbuD/mWy92a1gtu+eHa
> 	JA8njDRZ4zh0iX239dsmw==
>
> ; <<>> DiG 9.3.1 <<>> -t txt arnold._domainkey.neland.dk @ns4.gratisdns.dk
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41315
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5
>
> ;; QUESTION SECTION:
> ;arnold._domainkey.neland.dk.   IN      TXT
>
> ;; ANSWER SECTION:
> arnold._domainkey.neland.dk. 43200 IN   TXT     "g=\; k=rsa\; t=y\;
> p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMDitcv/6R1RMjPiGHCiIcTnvVsA+A3XGg5fCf2yKUrrf7NmJw7GB9Cj35GZavzHwOVSUxkQiRUknt/+2jJMS8UCAwEAAQ=="
>
> What's wrong? :-(

>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their support.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!