Re: Account öfters mal reaktivieren
Max Grobecker
max.grobecker at ml.grobecker.info
Sa Jul 25 22:51:17 CEST 2015
Hallo,
Am 25.07.2015 um 22:28 schrieb Daniel:
> Hallo Max,
>
> danke für deine Antwort, ich habe die Liste auf MIME stehen.
>
> Anbei mal ne Liste aus den Logs, kannst dir da gerne ne ID rausnehmen:
>
> Jul 8 17:58:17 postfix/cleanup[17901]: B6C7F267EE002: milter-reject: END-OF-MESSAGE from ilpostino.jpberlin.de[213.203.238.6]: 5.7.0 bad DKIM signature data; from=<postfixbuch-users-bounces at listen.jpberlin.de> to=<X> proto=ESMTP helo=<ilpostino.jpberlin.de>
Die Queue-IDs kann ich bei mir natürlich nicht finden - die sind nur für dein Logfile ;-)
Ich habe mir aber einfach mal deine Mail angesehen und festgestellt, dass da etwas merkwürdig ist:
Mein Amavis befindet die DKIM-Signatur für gültig, irgendein anderer Server (vermutlich deiner?) ist der Meinung,
dass die Signatur ungültig wäre:
----------------------------------------------------------
Received: from DanielPC (Daniel-PC.fritz.box
[IPv6:2003:57:e631:4300:340e:5919:1371:ea4e])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested) (Authenticated sender: Daniel)
by server.ist-immer-online.de (Postfix) with ESMTPSA id 41123267EE002
for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:50 +0200 (CEST)
Authentication-Results: server.ist-immer-online.de;
dmarc=fail header.from=ist-immer-online.de <------- !!!!
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ist-immer-online.de;
s=mail; t=1437856130;
bh=iSBWY8jmQY8vlQXlsegq9+iu39MR/4i5d4hZY7njm+c=;
h=From:To:References:In-Reply-To:Subject:Date;
b=s3HK29DncnTsZ7mbDfcmbjgsPMH25akqo6A6KCA104K30bAB1iM/1D8DAXaEGDrAa
7Tqy73aWTAXpZWyywGwUqT0spL5bagujHAYCyEt0NLfWKO80Vq/FVin5MFTP9zpc81
lzP2ofyWxUn00e911kbCWEGJZsZiOyOAreqbifjY=
From: "Daniel" <daniel at ist-immer-online.de>
----------------------------------------------------------
Ich habe mal die kompletten Header als Textdatei angehangen. Mein Amavis ist ganz oben und vermeldet gültige DKIM-Signatur.
>
> Jeweils teils ne Stunde vorher oder nachher klappt es aber wieder.
Da habe ich eigentlich nur zwei Erklärungen für:
* Das ist eine E-Mail, die einfach nicht DKIM-Signiert ist und durchgeht
* Du nutzt einen DNS-Resolver, der dir faulige Daten zurückliefert
Letztere Erklärung würde ggf. auch das oben beschriebene Phänomen erklären.
Viele Grüße aus dem Tal
Max
-------------- nächster Teil --------------
Return-Path: <postfixbuch-users-bounces at listen.jpberlin.de>
Received: from localhost (localhost [127.0.0.1])
by mx0.301-moved.de (GrobiSuperMail) with ESMTP id 3mdzX6639Wz9xtt
for <max.grobecker at ml.grobecker.info>; Sat, 25 Jul 2015 22:29:26 +0200 (CEST)
X-Virus-Scanned: Mailfilter on mx0.301-moved.de
X-Spam-Flag: NO
X-Spam-Score: -4.939
X-Spam-Level:
X-Spam-Status: No, score=-4.939 tagged_above=-99 required=5.3
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.608,
SPF_PASS=-0.031] autolearn=ham
Authentication-Results: mx0.301-moved.de (amavisd-new);
dkim=pass (1024-bit key) header.d=ist-immer-online.de
Received: from mx0.301-moved.de ([127.0.0.1])
by localhost (mx0.301-moved.de [127.144.138.238]) (amavisd-new, port 10024)
with ESMTP id YT-I1B2rVk5l for <max.grobecker at ml.grobecker.info>;
Sat, 25 Jul 2015 22:29:24 +0200 (CEST)
X-policyd-weight: using cached result; rate: -7.2
Received: from ilpostino.jpberlin.de (ilpostino.jpberlin.de [213.203.238.6])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx0.301-moved.de (GrobiSuperMail) with ESMTPS
for <max.grobecker at ml.grobecker.info>; Sat, 25 Jul 2015 22:29:23 +0200 (CEST)
Received: from [127.0.0.1] (localhost [127.0.0.1])
by ilpostino.jpberlin.de (Postfix) with ESMTP id EF3A4610BE;
Sat, 25 Jul 2015 22:28:58 +0200 (CEST)
X-Original-To: postfixbuch-users at listi.jpberlin.de
Delivered-To: postfixbuch-users at listi.jpberlin.de
Received: from mx1.heinlein-support.de (mx1.heinlein-support.de
[91.198.250.10])
by ilpostino.jpberlin.de (Postfix) with ESMTPS id 63E8560B4E
for <postfixbuch-users at listi.jpberlin.de>;
Sat, 25 Jul 2015 22:28:57 +0200 (CEST)
Received: from gerste.heinlein-support.de (gerste.heinlein-support.de
[91.198.250.173])
by mx1.heinlein-support.de (Postfix) with ESMTP id 56FB82FEAB
for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:57 +0200 (CEST)
X-Virus-Scanned: amavisd-new at heinlein-support.de
Received: from mx1.heinlein-support.de ([91.198.250.10])
by gerste.heinlein-support.de (gerste.heinlein-support.de [91.198.250.170])
(amavisd-new, port 10024)
with ESMTP id UTo3_H_gctlf for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:55 +0200 (CEST)
X-policyd-weight: DYN_NJABL=SKIP(0) NOT_IN_SBL_XBL_SPAMHAUS=-1.5
NOT_IN_SPAMCOP=-1.5 BL_NJABL=SKIP(-1.5) CL_IP_EQ_HELO_IP=-2 (check from:
.ist-immer-online. - helo: .mx02.posteo. - helo-domain: .posteo.)
FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -5.5
Received: from mx02.posteo.de (mx02.posteo.de [89.146.194.165])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by mx1.heinlein-support.de (Postfix) with ESMTPS
for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:54 +0200 (CEST)
Received: from dovecot04.posteo.de (unknown [185.67.36.27])
by mx02.posteo.de (Postfix) with ESMTPS id 05C6825AF505
for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:53 +0200 (CEST)
Received: from mail.posteo.de (localhost [127.0.0.1])
by dovecot04.posteo.de (Postfix) with ESMTPSA id 3mdzWT63W6zFpW3
for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:53 +0200 (CEST)
Received: from DanielPC (Daniel-PC.fritz.box
[IPv6:2003:57:e631:4300:340e:5919:1371:ea4e])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested) (Authenticated sender: Daniel)
by server.ist-immer-online.de (Postfix) with ESMTPSA id 41123267EE002
for <postfixbuch-users at listen.jpberlin.de>;
Sat, 25 Jul 2015 22:28:50 +0200 (CEST)
Authentication-Results: server.ist-immer-online.de;
dmarc=fail header.from=ist-immer-online.de
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ist-immer-online.de;
s=mail; t=1437856130;
bh=iSBWY8jmQY8vlQXlsegq9+iu39MR/4i5d4hZY7njm+c=;
h=From:To:References:In-Reply-To:Subject:Date;
b=s3HK29DncnTsZ7mbDfcmbjgsPMH25akqo6A6KCA104K30bAB1iM/1D8DAXaEGDrAa
7Tqy73aWTAXpZWyywGwUqT0spL5bagujHAYCyEt0NLfWKO80Vq/FVin5MFTP9zpc81
lzP2ofyWxUn00e911kbCWEGJZsZiOyOAreqbifjY=
From: "Daniel" <daniel at ist-immer-online.de>
To: "'Diskussionen und Support rund um Postfix'"
<postfixbuch-users at listen.jpberlin.de>
References: <000801d0c5d5$75134f10$5f39ed30$@ist-immer-online.de>
<20150724061809.GA20925 at spider.services.datevnet.de>
<28D798A0-81DC-490B-BA37-C586ADC1391F at ist-immer-online.de>
<55B1E4BB.4080105 at datev.de>
<001a01d0c64d$a7fe32a0$f7fa97e0$@ist-immer-online.de>
<55B3EA06.4050301 at ml.grobecker.info>
In-Reply-To: <55B3EA06.4050301 at ml.grobecker.info>
Subject: =?utf-8?Q?AW:_Account_=C3=B6fters_mal_reaktivie?=
=?utf-8?Q?ren?=
Date: Sat, 25 Jul 2015 22:28:47 +0200
Message-ID: <005b01d0c718$82aaab70$88000250$@ist-immer-online.de>
MIME-Version: 1.0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Thread-Index: AQHRRbVVd88qWoBpfdgUuo2iflAQOQHN8bo8AfCp3VQBw1wMLwMHucRNAzYMxWWdjaO8sA==
Content-Language: de
X-MailScanner-ID: 41123267EE002.A84F4
X-MailScanner: Found to be clean
X-MailScanner-From: daniel at ist-immer-online.de
X-BeenThere: postfixbuch-users at listen.jpberlin.de
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: Diskussionen und Support rund um Postfix
<postfixbuch-users at listen.jpberlin.de>
List-Id: Diskussionen und Support rund um Postfix
<postfixbuch-users.listen.jpberlin.de>
List-Unsubscribe: <https://listi.jpberlin.de/mailman/options/postfixbuch-users>,
<mailto:postfixbuch-users-request at listen.jpberlin.de?subject=unsubscribe>
List-Archive: <https://listi.jpberlin.de/pipermail/postfixbuch-users/>
List-Post: <mailto:postfixbuch-users at listen.jpberlin.de>
List-Help: <mailto:postfixbuch-users-request at listen.jpberlin.de?subject=help>
List-Subscribe: <https://listi.jpberlin.de/mailman/listinfo/postfixbuch-users>,
<mailto:postfixbuch-users-request at listen.jpberlin.de?subject=subscribe>
Errors-To: postfixbuch-users-bounces at listen.jpberlin.de
Sender: "Postfixbuch-users" <postfixbuch-users-bounces at listen.jpberlin.de>
-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname : signature.asc
Dateityp : application/pgp-signature
Dateigröße : 819 bytes
Beschreibung: OpenPGP digital signature
URL : <https://listi.jpberlin.de/pipermail/postfixbuch-users/attachments/20150725/ca168b6b/attachment.asc>
Mehr Informationen über die Mailingliste Postfixbuch-users