[Rspamd-Users] Body hash mismatch
Ihor Antonov
ihor at antonovs.family
Thu Apr 2 16:23:28 UTC 2020
Hi there,
When I send messages to FreeBSD mailing lists I get a bunch of email
saying
> A message claiming to be from you has failed the published DMARC
> policy for your domain.
>
> Sender Domain: antonovs.family
> Sender IP Address: 96.47.72.81
> Received Date: Thu, 02 Apr 2020 14:50:59 +0200
> SPF Alignment: no
> DKIM Alignment: no
> DMARC Results: None, Accept
Plus a bunch of headers (see below) with
> X-DKIM-Failure: bodyhash_mismatch
Also https://mxtoolbox.com/deliverability/ report gave me the following
dkim:antonovs.family:20200215
Dkim Public Record:
v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD3oleaUzBslScdYWb8wgpX/wtBp2rlgq59KO0d2iOYObjms+6opHoZW3ELCiYK5IDQtB0EEHo8fCN+ZPMTzWJBeQU12lvWtgovpsLkHtBttQAJV9buE6tfgRvt2/bxJ6cmfzhatD2c5oTnHxthEzLsyzrWrW/pinJw6iL3VEtBiwIDAQAB;
Dkim Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=antonovs.family;
s=20200215; t=1585105839;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:mime-version:mime-version:content-type:content-type:
content-transfer-encoding:content-transfer-encoding;
bh=niSjqgR59qLmvyIzlKxFvadvrY8xrSXsEsFIS636Dtc=;
b=V8XGdgEgERKupPzzOXdvRiBQjgN9wLrHcb33Z84ZFKkRTMzh67zAwhG+dOs6flccIafxMY
lV3Om8goAULuNV65KtGBRdChmASSlKqBV/Y7RPNiVWFH23tm8Yas2oOmXEnu1xWl/kpQoV
OPrhVdeRrGrzT30zF6uQ17Nw+MAvpdA=
Body Hash The hash of the canonicalized body part of the message as
limited by the 'l=' tag:
> niSjqgR59qLmvyIzlKxFvadvrY8xrSXsEsFIS636Dtc=
Expected Body Hash The generated body hash used to verify the signature:
> rQRB38aYL/bM9tuiyxWthOBO+cLFM1mrRjN0jdyX9Vg= DKIM Signature Body
Hash Not Verify
I am not sure what is going wrong. Other tools like
https://dkimvalidator.com report that my DKIM signature is valid
My dkim_signing.conf
domain {
antonovs.family {
path = "/etc/ssl/dkim/mail.antonovs.family.dkim";
selector = "20200215";
}
}
Please help troubleshooting this.
> ------ This is a copy of the headers that were received before the error
> was detected.
>
> X-DKIM-Failure: bodyhash_mismatch
> Received: from mx2.freebsd.org ([96.47.72.81])
> by mx159.antispamcloud.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
> (Exim 4.92)
> (envelope-from <owner-freebsd-hackers at freebsd.org>)
> id 1jJzJD-000cO7-6n
> for mailinglists at leaseweb.com; Thu, 02 Apr 2020 14:50:59 +0200
> Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
> (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
> (Client CN "mx1.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK))
> by mx2.freebsd.org (Postfix) with ESMTPS id 306056BFC7;
> Thu, 2 Apr 2020 12:50:34 +0000 (UTC)
> (envelope-from owner-freebsd-hackers at freebsd.org)
> Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13])
> by mx1.freebsd.org (Postfix) with ESMTP id 48tNFz5nBkz3C7s;
> Thu, 2 Apr 2020 12:50:31 +0000 (UTC)
> (envelope-from owner-freebsd-hackers at freebsd.org)
> Delivered-To: freebsd-hackers at mailman.nyi.freebsd.org
> Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
> by mailman.nyi.freebsd.org (Postfix) with ESMTP id E3F7C2741B7;
> Thu, 2 Apr 2020 07:57:24 +0000 (UTC)
> (envelope-from ihor at antonovs.family)
> Received: from mail.antonovs.family (mail.antonovs.family [100.25.240.195])
> (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
> server-signature RSA-PSS (4096 bits)
> client-signature RSA-PSS (2048 bits) client-digest SHA256)
> (Client CN "mail.antonovs.family",
> Issuer "Let's Encrypt Authority X3" (verified OK))
> by mx1.freebsd.org (Postfix) with ESMTPS id 48tFlT1JV4z3F76;
> Thu, 2 Apr 2020 07:57:08 +0000 (UTC)
> (envelope-from ihor at antonovs.family)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=antonovs.family;
> s=20200215; t=1585814216;
> h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
> to:to:cc:cc:mime-version:mime-version:content-type:content-type:
> in-reply-to:in-reply-to:references:references;
> bh=1DWlmgC3hXSwofJXx9sNFHqg9YRUtuZM3trReRNkAII=;
> b=omYXB/fjLGzI2ISKBhAqRYia+IBCy6iTLJhI1KbPoq4inZMggEQKl6qQX1RKd8tQVDNp9y
> zV2OnVFtioZ3nixfJAL65+9MMWBLV5AR1bNEU5dWyzhpEMboF6PJC1HU66CKzSsHiW4a9V
> btzsd+sPYdmPO13WGKBQGRZYchfJBLY=
> Received: by mail.antonovs.family (OpenSMTPD) with ESMTPSA id 5b42eedc
> (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO);
> Thu, 2 Apr 2020 07:56:56 +0000 (UTC)
> Date: Thu, 2 Apr 2020 00:56:53 -0700
> From: Ihor Antonov <ihor at antonovs.family>
> To: Allan Jude <allanjude at freebsd.org>
> Subject: Re: FreeBSD Office Hours: April 1, 2020 18:00 UTC
> Message-ID: <20200402075653.wi4jcapp5mdg44sy at sea-ll-10936>
> References: <5cae4eda-b3e9-a65e-a2dc-8f9435f20236 at freebsd.org>
> <056ee35e-4645-6ffe-e0a9-9b4940a5ba1a at freebsd.org>
> MIME-Version: 1.0
> Content-Disposition: inline
> In-Reply-To: <056ee35e-4645-6ffe-e0a9-9b4940a5ba1a at freebsd.org>
> X-Rspamd-Queue-Id: 48tFlT1JV4z3F76
> X-Spamd-Bar: -----
> Authentication-Results: mx1.freebsd.org;
> dkim=pass header.d=antonovs.family header.s=20200215 header.b=omYXB/fj;
> dmarc=pass (policy=none) header.from=antonovs.family;
> spf=pass (mx1.freebsd.org: domain of ihor at antonovs.family designates
> 100.25.240.195 as permitted sender) smtp.mailfrom=ihor at antonovs.family
> X-Spamd-Result: default: False [-5.89 / 15.00]; ARC_NA(0.00)[];
> RCVD_VIA_SMTP_AUTH(0.00)[];
> R_DKIM_ALLOW(-0.20)[antonovs.family:s=20200215];
> NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[];
> RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+mx];
> TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
> IP_SCORE(-3.39)[ip: (-9.33), ipnet: 100.24.0.0/13(-4.53), asn: 14618(-3.02),
> country: US(-0.05)]; NEURAL_HAM_LONG(-1.00)[-1.000,0];
> TO_DN_SOME(0.00)[]; DKIM_TRACE(0.00)[antonovs.family:+];
> DMARC_POLICY_ALLOW(-0.50)[antonovs.family,none];
> FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[];
> MIME_TRACE(0.00)[0:+];
> ASN(0.00)[asn:14618, ipnet:100.24.0.0/13, country:US];
> RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]
> X-BeenThere: freebsd-hackers at freebsd.org
> X-Mailman-Version: 2.1.29
> Precedence: list
> List-Id: Technical Discussions relating to FreeBSD
> <freebsd-hackers.freebsd.org>
> List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-hackers>,
> <mailto:freebsd-hackers-request at freebsd.org?subject=unsubscribe>
> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
> List-Post: <mailto:freebsd-hackers at freebsd.org>
> List-Help: <mailto:freebsd-hackers-request at freebsd.org?subject=help>
> List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
> <mailto:freebsd-hackers-request at freebsd.org?subject=subscribe>
> Cc: FreeBSD Hackers <freebsd-hackers at freebsd.org>, freebsd-current at freebsd.org,
> freebsd-questions at freebsd.org
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> Errors-To: owner-freebsd-hackers at freebsd.org
> Sender: owner-freebsd-hackers at freebsd.org
> Received-SPF: pass (mx159.antispamcloud.com: domain of freebsd.org designates 96.47.72.81 as permitted sender) client-ip=96.47.72.81; envelope-from=owner-freebsd-hackers at freebsd.org; helo=mx2.freebsd.org;
> X-SPF-Result: mx159.antispamcloud.com: domain of freebsd.org designates 96.47.72.81 as permitted sender
> X-DKIM-Status: none / / freebsd.org / / /
> X-DKIM-Status: fail / bodyhash_mismatch / antonovs.family / antonovs.family / / 20200215
More information about the Users
mailing list