[Bloat] Testing DKIM signing

[Bloat] Testing DKIM signing

[Toke Høiland-Jørgensen]

The mail server at lists.bufferbloat.net should now be DKIM-signing
outgoing email. This is a test of that; please ignore. :)

-Toke

Re: [Bloat] Testing DKIM signing

[David Collier-Brown]

On 30/10/16 02:48 PM, Toke Høiland-Jørgensen wrote:
> The mail server at lists.bufferbloat.net should now be DKIM-signing
> outgoing email. This is a test of that; please ignore. :)
>
> -Toke
> _______________________________________________
> Bloat mailing list
> Bloat@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/bloat
I ran it through spamcop and it passed, so it's structurally OK.
--dave

A few lines make it look like you're experimenting (;-))

Received-SPF: none (domain of lists.bufferbloat.net does not designate 
permitted sender hosts)

Received: from lists.bufferbloat.net (lists.bufferbloat.net [45.79.142.77])
     (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
     (No client certificate requested)
     by vmx5.spamcop.net (Postfix) with ESMTPS id 84FF3ED1CE
     for <x>; Sun, 30 Oct 2016 11:48:56 -0700 (PDT)

X-Original-To: x
Delivered-To: x

-- 
David Collier-Brown,         | Always do right. This will gratify
System Programmer and Author | some people and astonish the rest
davecb@spamcop.net           |                      -- Mark Twain

Re: [Bloat] Testing DKIM signing

[Neil Shepperd]

[-- Attachment #1: Type: text/plain, Size: 1864 bytes --]

FYI, I'm not seeing a DKIM signature from the list server? (in gmail)

Authentication-Results: mx.google.com; dkim=neutral (body hash did not
verify) header.i=@toke.dk; spf=pass (google.com: best guess record for
domain of bloat-bounces@lists.bufferbloat.net designates
2600:3c03::f03c:91ff:fe61:86ce as permitted sender) smtp.mailfrom=
bloat-bounces@lists.bufferbloat.net; dmarc=fail (p=NONE dis=NONE)
header.from=toke.dk

Looks like lists.bufferbloat.net has an SPF record now though, yay :)

On Sun, 30 Oct 2016 at 15:56 David Collier-Brown <davec-b@rogers.com> wrote:

On 30/10/16 02:48 PM, Toke Høiland-Jørgensen wrote:
> The mail server at lists.bufferbloat.net should now be DKIM-signing
> outgoing email. This is a test of that; please ignore. :)
>
> -Toke
> _______________________________________________
> Bloat mailing list
> Bloat@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/bloat
I ran it through spamcop and it passed, so it's structurally OK.
--dave

A few lines make it look like you're experimenting (;-))

Received-SPF: none (domain of lists.bufferbloat.net does not designate
permitted sender hosts)

Received: from lists.bufferbloat.net (lists.bufferbloat.net [45.79.142.77])
     (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
     (No client certificate requested)
     by vmx5.spamcop.net (Postfix) with ESMTPS id 84FF3ED1CE
     for <x>; Sun, 30 Oct 2016 11:48:56 -0700 (PDT)

X-Original-To: x
Delivered-To: x

--
David Collier-Brown,         | Always do right. This will gratify
System Programmer and Author | some people and astonish the rest
davecb@spamcop.net           |                      -- Mark Twain

_______________________________________________
Bloat mailing list
Bloat@lists.bufferbloat.net
https://lists.bufferbloat.net/listinfo/bloat

[-- Attachment #2: Type: text/html, Size: 4567 bytes --]

Re: [Bloat] Testing DKIM signing

[Toke Høiland-Jørgensen]

Neil Shepperd <nshepperd@gmail.com> writes:

> FYI, I'm not seeing a DKIM signature from the list server? (in gmail)
>
> Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@toke.dk; spf=pass (google.com: best
> guess record for domain of bloat-bounces@lists.bufferbloat.net designates 2600:3c03::f03c:91ff:fe61:86ce as permitted sender)
> smtp.mailfrom=bloat-bounces@lists.bufferbloat.net; dmarc=fail (p=NONE
> dis=NONE) header.from=toke.dk

Grump. Well, I'll see if I can figure out why...

> Looks like lists.bufferbloat.net has an SPF record now though, yay :)

Yay, one out of two! ;)

-Toke

Re: [Bloat] Testing DKIM signing

[Toke Høiland-Jørgensen]

Toke Høiland-Jørgensen <toke@toke.dk> writes:

> Neil Shepperd <nshepperd@gmail.com> writes:
>
>> FYI, I'm not seeing a DKIM signature from the list server? (in gmail)
>>
>> Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@toke.dk; spf=pass (google.com: best
>> guess record for domain of bloat-bounces@lists.bufferbloat.net designates 2600:3c03::f03c:91ff:fe61:86ce as permitted sender)
>> smtp.mailfrom=bloat-bounces@lists.bufferbloat.net; dmarc=fail (p=NONE
>> dis=NONE) header.from=toke.dk
>
> Grump. Well, I'll see if I can figure out why...

Aha, opendkim needed to be configured to look at the Sender header
instead of From when deciding whether to sign. So hopefully it works
better now (i.e. this is another test). :)

-Toke

Re: [Bloat] Testing DKIM signing

[David Collier-Brown]

On 01/11/16 11:09 AM, Toke Høiland-Jørgensen wrote:
> Aha, opendkim needed to be configured to look at the Sender header
> instead of From when deciding whether to sign. So hopefully it works
> better now (i.e. this is another test). :)
>
> -Toke
>
Spamcop doesn't flag anything about this

--dave


-- 
David Collier-Brown,         | Always do right. This will gratify
System Programmer and Author | some people and astonish the rest
davecb@spamcop.net           |                      -- Mark Twain

Re: [Bloat] Testing DKIM signing

[Neil Shepperd]

[-- Attachment #1: Type: text/plain, Size: 774 bytes --]

Well, now I don't know if it worked, because the list server is too smart
and didn't send me the email since it saw I was CC'd already :)

On Tue, 1 Nov 2016 at 11:55 David Collier-Brown <davec-b@rogers.com> wrote:

> On 01/11/16 11:09 AM, Toke Høiland-Jørgensen wrote:
> > Aha, opendkim needed to be configured to look at the Sender header
> > instead of From when deciding whether to sign. So hopefully it works
> > better now (i.e. this is another test). :)
> >
> > -Toke
> >
> Spamcop doesn't flag anything about this
>
> --dave
>
>
> --
> David Collier-Brown,         | Always do right. This will gratify
> System Programmer and Author | some people and astonish the rest
> davecb@spamcop.net           |                      -- Mark Twain
>
>

[-- Attachment #2: Type: text/html, Size: 1480 bytes --]

Re: [Bloat] Testing DKIM signing

[Neil Shepperd]

[-- Attachment #1: Type: text/plain, Size: 919 bytes --]

(Either that or gmail is being smart about Message-IDs.)

On Tue, 1 Nov 2016 at 12:02 Neil Shepperd <nshepperd@gmail.com> wrote:

> Well, now I don't know if it worked, because the list server is too smart
> and didn't send me the email since it saw I was CC'd already :)
>
> On Tue, 1 Nov 2016 at 11:55 David Collier-Brown <davec-b@rogers.com>
> wrote:
>
> On 01/11/16 11:09 AM, Toke Høiland-Jørgensen wrote:
> > Aha, opendkim needed to be configured to look at the Sender header
> > instead of From when deciding whether to sign. So hopefully it works
> > better now (i.e. this is another test). :)
> >
> > -Toke
> >
> Spamcop doesn't flag anything about this
>
> --dave
>
>
> --
> David Collier-Brown,         | Always do right. This will gratify
> System Programmer and Author | some people and astonish the rest
> davecb@spamcop.net           |                      -- Mark Twain
>
>

[-- Attachment #2: Type: text/html, Size: 1975 bytes --]

Re: [Bloat] Testing DKIM signing

[Toke Høiland-Jørgensen]

Neil Shepperd <nshepperd@gmail.com> writes:

> Well, now I don't know if it worked, because the list server is too
> smart and didn't send me the email since it saw I was CC'd already :)

Yes, I've had to turn off that for testing this. Seems the headers are
added, but another configuration change broke the signatures. Here's
another try to see if I managed to fix that.

-Toke

Re: [Bloat] Testing DKIM signing

[Neil Shepperd]

[-- Attachment #1: Type: text/plain, Size: 1040 bytes --]

Authentication-Results: mx.google.com;
   dkim=pass header.i=@lists.bufferbloat.net;
   dkim=neutral (body hash did not verify) header.i=@toke.dk;
   spf=pass (google.com: domain of bloat-bounces@lists.bufferbloat.net
designates 2600:3c03::f03c:91ff:fe61:86ce as permitted
sender) smtp.mailfrom=bloat-bounces@lists.bufferbloat.net;
   dmarc=fail (p=NONE dis=NONE) header.from=toke.dk

\o/

On Tue, 1 Nov 2016 at 12:06 Toke Høiland-Jørgensen <toke@toke.dk> wrote:

> Neil Shepperd <nshepperd@gmail.com> writes:
>
> > Well, now I don't know if it worked, because the list server is too
> > smart and didn't send me the email since it saw I was CC'd already :)
>
> Yes, I've had to turn off that for testing this. Seems the headers are
> added, but another configuration change broke the signatures. Here's
> another try to see if I managed to fix that.
>
> -Toke
> _______________________________________________
> Bloat mailing list
> Bloat@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/bloat
>

[-- Attachment #2: Type: text/html, Size: 2347 bytes --]

Re: [Bloat] Testing DKIM signing

[Toke Høiland-Jørgensen]

Neil Shepperd <nshepperd@gmail.com> writes:

> Authentication-Results: mx.google.com;
>    dkim=pass header.i=@lists.bufferbloat.net;
>    dkim=neutral (body hash did not verify) header.i=@toke.dk;
>    spf=pass (google.com: domain of bloat-bounces@lists.bufferbloat.net designates 2600:3c03::f03c:91ff:fe61:86ce as permitted
> sender) smtp.mailfrom=bloat-bounces@lists.bufferbloat.net;
>    dmarc=fail (p=NONE dis=NONE) header.from=toke.dk
>
> \o/

And there was much rejoicing! :)

-Toke