Bug 187605 - FreeBSD mailing lists break DKIM
Summary: FreeBSD mailing lists break DKIM
Status: Closed FIXED
Alias: None
Product: Services
Classification: Unclassified
Component: Mailing Lists (show other bugs)
Version: unspecified
Hardware: Any Any
: Normal Affects Only Me
Assignee: postmaster
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-15 11:50 UTC by reko.turja
Modified: 2022-07-14 02:58 UTC (History)
5 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description reko.turja 2014-03-15 11:50:00 UTC
When forwarding mail, FreeBSD mailing lists keep DKIM headers intact like example below and the Authentication results in "verification failed" due DKIM signing belonging to original sender, not freebsd.org.

Return-Path: <owner-freebsd-questions@freebsd.org>
Received: from cerebro.liukuma.net ([unix socket])
	 by mail.liukuma.net (Cyrus v2.4.17) with LMTPA;
	 Sat, 15 Mar 2014 10:11:33 +0200
X-Sieve: CMU Sieve 2.4
Received: from cerebro.liukuma.net (localhost [127.0.0.1])
	by cerebro.liukuma.net (Postfix) with ESMTP id 65ED88A0123
	for <reko.turja@liukuma.net>; Sat, 15 Mar 2014 10:11:33 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.8.3 cerebro.liukuma.net 65ED88A0123
Authentication-Results: cerebro.liukuma.net; dkim=fail
	reason="verification failed"
	header.d=rocketmail.com header.i=@rocketmail.com header.b=jViIpzjQ;
	dkim-adsp=none
X-Virus-Scanned: amavisd-new at liukuma.net
X-Spam-Flag: NO
X-Spam-Score: -1.302
X-Spam-Level:
X-Spam-Status: No, score=-1.302 tagged_above=-25 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1,
	FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001,
	HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_PASS=-0.001,
	T_DKIM_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01]
	autolearn=no autolearn_force=no
Received: from cerebro.liukuma.net ([127.0.0.1])
	by cerebro.liukuma.net (cerebro.liukuma.net [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id fcz6-Vbu9N_t for <reko.turja@liukuma.net>;
	Sat, 15 Mar 2014 10:11:28 +0200 (EET)
Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:1900:2254:206a::19:2])
	by cerebro.liukuma.net (Postfix) with ESMTP id 8B4688A0122
	for <reko.turja@liukuma.net>; Sat, 15 Mar 2014 10:11:27 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.8.3 cerebro.liukuma.net 8B4688A0122
Received: from hub.freebsd.org (hub.freebsd.org [IPv6:2001:1900:2254:206c::16:88])
	(using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by mx2.freebsd.org (Postfix) with ESMTPS id 19D0A2F3B;
	Sat, 15 Mar 2014 08:11:25 +0000 (UTC)
Received: from hub.freebsd.org (hub.freebsd.org [IPv6:2001:1900:2254:206c::16:88])
	by hub.freebsd.org (Postfix) with ESMTP id AAFBA130;
	Sat, 15 Mar 2014 08:11:24 +0000 (UTC)
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 43C4A106
 for <freebsd-questions@freebsd.org>; Sat, 15 Mar 2014 08:11:21 +0000 (UTC)
Received: from nm2-vm5.bullet.mail.ne1.yahoo.com
 (nm2-vm5.bullet.mail.ne1.yahoo.com [98.138.91.224])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id D9FE7CC9
 for <freebsd-questions@freebsd.org>; Sat, 15 Mar 2014 08:11:20 +0000 (UTC)
Received: from [98.138.226.176] by nm2.bullet.mail.ne1.yahoo.com with NNFMP;
 15 Mar 2014 08:09:01 -0000
Received: from [98.138.226.125] by tm11.bullet.mail.ne1.yahoo.com with NNFMP;
 15 Mar 2014 08:09:01 -0000
Received: from [127.0.0.1] by smtp204.mail.ne1.yahoo.com with NNFMP;
 15 Mar 2014 08:09:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s1024;
 t=1394870941; bh=pc+8wSOgxk5p+aBeQiTsrjxeptUVariVh7J2yamGCtI=;
 h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Date:From:To:Subject:Message-Id:In-Reply-To:References:X-Mailer:Mime-Version:Content-Type:Content-Transfer-Encoding;
 b=jViIpzjQGCz4Mn5wyxsyOSa/D88lmpnEqUXvXpAn+fn3w5E6HXS2QLxPrPAgRy4glsTAHlzInukpu+tNK2JFgavBBIdEHwwn+nRmXqT03HW2f4ZOarieLLutt1/UXWwAH4N77GKqGVTG4DINR5m1k1Tdp3Zx3n4elnwCOg2Juic=
X-Yahoo-Newman-Id: 840732.4100.bm@smtp204.mail.ne1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: ynyJGnIVM1mb9dlr7R_1FkzEPEiFdMcbCRLGHzrjwmKJB1m
 CldggFSmSrBh_vaM1i3uxhBWylOuOm4GajJa730rcvLR3iYAcz2gWBPQAHKy
 Bae0amQzDICgARBgpmXboTwJZzFTnr0COelcoVZ08LNtPC3HyZcR8lR1Fuco
 Ng9unot2CF6lE3ZDR6Z2PRUhqf0dwMRl98r4tZOozTnKOHvNaeR4h5sGpd7d
 7ee5yivv5HqYOcpHgaTqdDJNmbqy16.LCBhvYinb59OTpzfL_Kqq.W0L0o1i
 9Cxpzfd9ifqsFyOR6EV3Rxk.Riy7zzwY21wCb0gBdhpooMpA7F_FDTBUTPBV
 xkhEd8YicwkM70Wvc0QFmqVVP_bCR5kKMAI2EfgIBlusCjBdgScTbGG7II6T
 GE64K4YGMSwRl6RbYhuScLhrQEgZOle7qqIVrsCx5NnaSrdUdWvJVt1nCMuT
 g8OwTWwW5nSU4oCGYtxdZa5mSC4k2cKRuF6HoRJDkz4agBnjwCCBBSYwoXLs
 6iJGpOiF_V89J7jNLvObCh6tsX5Axi0A58HCViF58irLoqV98e6l6.2PotD1
 iOf84lxodpcX8Qf21F4e8HYrqpTtq2K3TljoLI62II1THWYZCPk5ljgvbIh7
 S1mW52XXhZH76chrU5pMuIS8i52ZWIbYV8Y7olR2NlsG_DLeqca9IV0h_6EJ
 6EDdGAQ--
X-Yahoo-SMTP: SEC3zYiswBD9sq45lcyyeQipExkn8zEko29uJv0vlQ7fgU5pYYw-
X-Rocket-Received: from freebsd.example.ne.jp (m.fujimoto@116.70.244.192 with
 plain [106.10.150.171])
 by smtp204.mail.ne1.yahoo.com with SMTP; 15 Mar 2014 01:09:01 -0700 PDT
Date: Sat, 15 Mar 2014 17:08:58 +0900
From: Masayoshi Fujimoto <m.fujimoto@rocketmail.com>
To: freebsd-questions@freebsd.org
Subject: Re:
Message-Id: <20140315170858.d48c39ec2eb4a193e21917c4@rocketmail.com>
In-Reply-To: <53240450.8070308@FreeBSD.org>
References: <1394862552.77754.YahooMailBasic@web125805.mail.ne1.yahoo.com>
 <53240450.8070308@FreeBSD.org>
X-Mailer: Sylpheed 3.3.0 (GTK+ 2.24.22; amd64-portbld-freebsd9.1)
Mime-Version: 1.0
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: owner-freebsd-questions@freebsd.org
Sender: owner-freebsd-questions@freebsd.org

Fix: 

Install own DKIM filtering, removing old headers and substituting by FreeBSD.org's own or removing them altogether using suitable mail processing tools.
How-To-Repeat: Send DKIM signed mail to FreeBSD mailing lists
Comment 1 Florian Smeets freebsd_committer freebsd_triage 2014-07-05 21:27:15 UTC
postmaster territory.
Comment 2 reko.turja 2014-07-05 22:08:54 UTC
postmaster@ contacted before submitting report, no reply/reaction.
Comment 3 Eitan Adler freebsd_committer freebsd_triage 2018-05-28 19:46:55 UTC
batch change:

For bugs that match the following
-  Status Is In progress 
AND
- Untouched since 2018-01-01.
AND
- Affects Base System OR Documentation

DO:

Reset to open status.


Note:
I did a quick pass but if you are getting this email it might be worthwhile to double check to see if this bug ought to be closed.