[Rspamd-Users] Body hash mismatch
Hans van Eijsden Photography
info at hansvaneijsden.nl
Thu Apr 2 16:43:22 UTC 2020
Hi Ihor,
Although I’m not sure f this issue is related to your DKIM config in Rspamd, please make sure to fix your domain settings first.
At https://en.internet.nl/mail/antonovs.family/340074/ you’ll see a lot of red.
Everything should be green and 100% as you can see at https://en.internet.nl/mail/hansvaneijsden.nl/340076/ or at least as high as possible and green.
Only when those basic issues are fixed I suggest you to look at other things to debug. Good luck!
Best regards / Met vriendelijke groet,
Hans van Eijsden
The Netherlands
+31 (0)38 23 00 648
Sent from my iPhone
> Op 2 apr. 2020, om 18:23 heeft Ihor Antonov <ihor at antonovs.family> het volgende geschreven:
>
> Hi there,
>
> When I send messages to FreeBSD mailing lists I get a bunch of email
> saying
>
>> A message claiming to be from you has failed the published DMARC
>> policy for your domain.
>>
>> Sender Domain: antonovs.family
>> Sender IP Address: 96.47.72.81
>> Received Date: Thu, 02 Apr 2020 14:50:59 +0200
>> SPF Alignment: no
>> DKIM Alignment: no
>> DMARC Results: None, Accept
> Plus a bunch of headers (see below) with
>> X-DKIM-Failure: bodyhash_mismatch
>
> Also https://mxtoolbox.com/deliverability/ report gave me the following
>
> dkim:antonovs.family:20200215
>
> Dkim Public Record:
> v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD3oleaUzBslScdYWb8wgpX/wtBp2rlgq59KO0d2iOYObjms+6opHoZW3ELCiYK5IDQtB0EEHo8fCN+ZPMTzWJBeQU12lvWtgovpsLkHtBttQAJV9buE6tfgRvt2/bxJ6cmfzhatD2c5oTnHxthEzLsyzrWrW/pinJw6iL3VEtBiwIDAQAB;
>
> Dkim Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=antonovs.family;
> s=20200215; t=1585105839;
> h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
> to:to:cc:mime-version:mime-version:content-type:content-type:
> content-transfer-encoding:content-transfer-encoding;
> bh=niSjqgR59qLmvyIzlKxFvadvrY8xrSXsEsFIS636Dtc=;
> b=V8XGdgEgERKupPzzOXdvRiBQjgN9wLrHcb33Z84ZFKkRTMzh67zAwhG+dOs6flccIafxMY
> lV3Om8goAULuNV65KtGBRdChmASSlKqBV/Y7RPNiVWFH23tm8Yas2oOmXEnu1xWl/kpQoV
> OPrhVdeRrGrzT30zF6uQ17Nw+MAvpdA=
>
> Body Hash The hash of the canonicalized body part of the message as
> limited by the 'l=' tag:
>
>> niSjqgR59qLmvyIzlKxFvadvrY8xrSXsEsFIS636Dtc=
>
> Expected Body Hash The generated body hash used to verify the signature:
>
>> rQRB38aYL/bM9tuiyxWthOBO+cLFM1mrRjN0jdyX9Vg= DKIM Signature Body
>
> Hash Not Verify
>
>
> I am not sure what is going wrong. Other tools like
> https://dkimvalidator.com report that my DKIM signature is valid
>
> My dkim_signing.conf
>
> domain {
> antonovs.family {
> path = "/etc/ssl/dkim/mail.antonovs.family.dkim";
> selector = "20200215";
> }
> }
>
>
> Please help troubleshooting this.
>
>
>> ------ This is a copy of the headers that were received before the error
>> was detected.
>>
>> X-DKIM-Failure: bodyhash_mismatch
>> Received: from mx2.freebsd.org ([96.47.72.81])
>> by mx159.antispamcloud.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
>> (Exim 4.92)
>> (envelope-from <owner-freebsd-hackers at freebsd.org>)
>> id 1jJzJD-000cO7-6n
>> for mailinglists at leaseweb.com; Thu, 02 Apr 2020 14:50:59 +0200
>> Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
>> (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
>> (Client CN "mx1.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK))
>> by mx2.freebsd.org (Postfix) with ESMTPS id 306056BFC7;
>> Thu, 2 Apr 2020 12:50:34 +0000 (UTC)
>> (envelope-from owner-freebsd-hackers at freebsd.org)
>> Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13])
>> by mx1.freebsd.org (Postfix) with ESMTP id 48tNFz5nBkz3C7s;
>> Thu, 2 Apr 2020 12:50:31 +0000 (UTC)
>> (envelope-from owner-freebsd-hackers at freebsd.org)
>> Delivered-To: freebsd-hackers at mailman.nyi.freebsd.org
>> Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
>> by mailman.nyi.freebsd.org (Postfix) with ESMTP id E3F7C2741B7;
>> Thu, 2 Apr 2020 07:57:24 +0000 (UTC)
>> (envelope-from ihor at antonovs.family)
>> Received: from mail.antonovs.family (mail.antonovs.family [100.25.240.195])
>> (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
>> server-signature RSA-PSS (4096 bits)
>> client-signature RSA-PSS (2048 bits) client-digest SHA256)
>> (Client CN "mail.antonovs.family",
>> Issuer "Let's Encrypt Authority X3" (verified OK))
>> by mx1.freebsd.org (Postfix) with ESMTPS id 48tFlT1JV4z3F76;
>> Thu, 2 Apr 2020 07:57:08 +0000 (UTC)
>> (envelope-from ihor at antonovs.family)
>> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=antonovs.family;
>> s=20200215; t=1585814216;
>> h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
>> to:to:cc:cc:mime-version:mime-version:content-type:content-type:
>> in-reply-to:in-reply-to:references:references;
>> bh=1DWlmgC3hXSwofJXx9sNFHqg9YRUtuZM3trReRNkAII=;
>> b=omYXB/fjLGzI2ISKBhAqRYia+IBCy6iTLJhI1KbPoq4inZMggEQKl6qQX1RKd8tQVDNp9y
>> zV2OnVFtioZ3nixfJAL65+9MMWBLV5AR1bNEU5dWyzhpEMboF6PJC1HU66CKzSsHiW4a9V
>> btzsd+sPYdmPO13WGKBQGRZYchfJBLY=
>> Received: by mail.antonovs.family (OpenSMTPD) with ESMTPSA id 5b42eedc
>> (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO);
>> Thu, 2 Apr 2020 07:56:56 +0000 (UTC)
>> Date: Thu, 2 Apr 2020 00:56:53 -0700
>> From: Ihor Antonov <ihor at antonovs.family>
>> To: Allan Jude <allanjude at freebsd.org>
>> Subject: Re: FreeBSD Office Hours: April 1, 2020 18:00 UTC
>> Message-ID: <20200402075653.wi4jcapp5mdg44sy at sea-ll-10936>
>> References: <5cae4eda-b3e9-a65e-a2dc-8f9435f20236 at freebsd.org>
>> <056ee35e-4645-6ffe-e0a9-9b4940a5ba1a at freebsd.org>
>> MIME-Version: 1.0
>> Content-Disposition: inline
>> In-Reply-To: <056ee35e-4645-6ffe-e0a9-9b4940a5ba1a at freebsd.org>
>> X-Rspamd-Queue-Id: 48tFlT1JV4z3F76
>> X-Spamd-Bar: -----
>> Authentication-Results: mx1.freebsd.org;
>> dkim=pass header.d=antonovs.family header.s=20200215 header.b=omYXB/fj;
>> dmarc=pass (policy=none) header.from=antonovs.family;
>> spf=pass (mx1.freebsd.org: domain of ihor at antonovs.family designates
>> 100.25.240.195 as permitted sender) smtp.mailfrom=ihor at antonovs.family
>> X-Spamd-Result: default: False [-5.89 / 15.00]; ARC_NA(0.00)[];
>> RCVD_VIA_SMTP_AUTH(0.00)[];
>> R_DKIM_ALLOW(-0.20)[antonovs.family:s=20200215];
>> NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[];
>> RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+mx];
>> TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
>> IP_SCORE(-3.39)[ip: (-9.33), ipnet: 100.24.0.0/13(-4.53), asn: 14618(-3.02),
>> country: US(-0.05)]; NEURAL_HAM_LONG(-1.00)[-1.000,0];
>> TO_DN_SOME(0.00)[]; DKIM_TRACE(0.00)[antonovs.family:+];
>> DMARC_POLICY_ALLOW(-0.50)[antonovs.family,none];
>> FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[];
>> MIME_TRACE(0.00)[0:+];
>> ASN(0.00)[asn:14618, ipnet:100.24.0.0/13, country:US];
>> RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]
>> X-BeenThere: freebsd-hackers at freebsd.org
>> X-Mailman-Version: 2.1.29
>> Precedence: list
>> List-Id: Technical Discussions relating to FreeBSD
>> <freebsd-hackers.freebsd.org>
>> List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-hackers>,
>> <mailto:freebsd-hackers-request at freebsd.org?subject=unsubscribe>
>> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
>> List-Post: <mailto:freebsd-hackers at freebsd.org>
>> List-Help: <mailto:freebsd-hackers-request at freebsd.org?subject=help>
>> List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
>> <mailto:freebsd-hackers-request at freebsd.org?subject=subscribe>
>> Cc: FreeBSD Hackers <freebsd-hackers at freebsd.org>, freebsd-current at freebsd.org,
>> freebsd-questions at freebsd.org
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Transfer-Encoding: 7bit
>> Errors-To: owner-freebsd-hackers at freebsd.org
>> Sender: owner-freebsd-hackers at freebsd.org
>> Received-SPF: pass (mx159.antispamcloud.com: domain of freebsd.org designates 96.47.72.81 as permitted sender) client-ip=96.47.72.81; envelope-from=owner-freebsd-hackers at freebsd.org; helo=mx2.freebsd.org;
>> X-SPF-Result: mx159.antispamcloud.com: domain of freebsd.org designates 96.47.72.81 as permitted sender
>> X-DKIM-Status: none / / freebsd.org / / /
>> X-DKIM-Status: fail / bodyhash_mismatch / antonovs.family / antonovs.family / / 20200215
>
> --
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users
More information about the Users
mailing list