[Ietf-dkim] requesting help understanding DKIM logs in Postfix

"Fazzina, Angelo" <angelo.fazzina@uconn.edu> Wed, 19 December 2018 16:44 UTC

Return-Path: <angelo.fazzina@uconn.edu>
X-Original-To: ietf-dkim@ietfa.amsl.com
Delivered-To: ietf-dkim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8EF9130E62 for <ietf-dkim@ietfa.amsl.com>; Wed, 19 Dec 2018 08:44:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=uconn.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wwA4oEQ04kQy for <ietf-dkim@ietfa.amsl.com>; Wed, 19 Dec 2018 08:44:26 -0800 (PST)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750101.outbound.protection.outlook.com [40.107.75.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6ED5130E4D for <ietf-dkim@ietf.org>; Wed, 19 Dec 2018 08:44:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uconn.onmicrosoft.com; s=selector1-uconn-edu; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3zHxGHEeUARr8oCjjuTiy1EGYPE3eWSjCAdEyld7izI=; b=YFKTslvk3GpoKelv7mwYSL2ajVIriY9t09y1nqXv9SXnVdOO1USqY55FuWzzHMJzkgCLqsdKUpBxq2y5k6uysNDnqLdJ3eJFejxw8dFMmJNRC54F27xnxhcikP98z7jtvT/xrQ6sZ5zb5KLa1V/Ngzgt2a1FJQ8bpjvs8fiEpiQ=
Received: from BN7PR05MB5859.namprd05.prod.outlook.com (20.176.30.82) by BN7PR05MB4065.namprd05.prod.outlook.com (52.132.219.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1446.15; Wed, 19 Dec 2018 16:44:23 +0000
Received: from BN7PR05MB5859.namprd05.prod.outlook.com ([fe80::b89c:5385:20fc:42a2]) by BN7PR05MB5859.namprd05.prod.outlook.com ([fe80::b89c:5385:20fc:42a2%3]) with mapi id 15.20.1446.018; Wed, 19 Dec 2018 16:44:23 +0000
From: "Fazzina, Angelo" <angelo.fazzina@uconn.edu>
To: "ietf-dkim@ietf.org" <ietf-dkim@ietf.org>
Thread-Topic: requesting help understanding DKIM logs in Postfix
Thread-Index: AdSXuQP21FsolJLIT2WjMoSHdPN/1Q==
Date: Wed, 19 Dec 2018 16:44:23 +0000
Message-ID: <BN7PR05MB5859413851D2B772E572AD8498BE0@BN7PR05MB5859.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=angelo.fazzina@uconn.edu;
x-originating-ip: [137.99.80.129]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BN7PR05MB4065; 6:XtFRZwO6WLYG3Tv3YsBrKsxUhibSV6/q49R2/l89Vw/QeBU57Oj0OmsL2XPT4tRHg1r/RXMRtz5YDelhRdQo2fUrsNKEjNC7HD0TkcUzfpSvW/CBBa1SW6GD2+V9tgLeoeYXBREhDvhJSQ1j4s8doodwDaKxbwrrVFnhG5syuFECFjGeOWHAEbBzQ7VRA1s4VeYPtUCIo/IJ5atc1pMdcP//U7cvto3POF0splhQ6bjAhlgv4Yi9u0EvtfVJ7PYXZwnPd/r0Dj7xQdUNndHaEkh0NeODptFVGZS4aA2G/GgIaRcDBvKjP/Kp1JfbR6/XyPu0UYh6/PwV4QlkJxaM7xigptmjBDuqsCyUo+realYNbrBUSkkMAVlGop+5I5OdqTl24fROgW2ofPRzne+bjzOyKMmT8sBgQ0J3LOcSowEgPVUFpDZMBbyai1wh1HCBctY2SUKQiPXTgpoTXOe3HQ==; 5:kAP53Cuhse90BG4utT5Go2R21GMVECj6edvNXQBXZgOgRgBOJVe/cnOBD4xumTArL1x8uweHP6wJxGMo4wvs1KM4f9vpMCMMji+dqgd72tGJ2UukWlSHHdKlr31hwZZaotfbMKUXY5NMaWWVT9XtrCpirSdcP3MPz8bqWsdShcI=; 7:gAlkIorXvdWShbSjpgcEB0ZwNK5aEaOVDqhPiqDHRZTAlHPeD5gUcYymbXV8ch85umHOXdXB/0GtUvl7pZT6C6SF4yl23cqWU5MWY51KqtP9dBdEMTtidMCF5xRzZU/uqP3Ly690J/Yk3eYNhfLN/g==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: e7eb3d22-d67b-419d-fce5-08d665d13b4b
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:BN7PR05MB4065;
x-ms-traffictypediagnostic: BN7PR05MB4065:
x-microsoft-antispam-prvs: <BN7PR05MB406598708D1E4A08E7D2E88998BE0@BN7PR05MB4065.namprd05.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(3230021)(999002)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231475)(944501520)(52105112)(148016)(149066)(150057)(6041310)(20161123564045)(20161123562045)(20161123560045)(20161123558120)(201703131423095)(201702281528075)(201702281529075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:BN7PR05MB4065; BCL:0; PCL:0; RULEID:; SRVR:BN7PR05MB4065;
x-forefront-prvs: 0891BC3F3D
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(366004)(396003)(39860400002)(346002)(199004)(189003)(6306002)(486006)(476003)(88552002)(9686003)(81156014)(68736007)(81166006)(54896002)(33656002)(66574012)(45080400002)(790700001)(99286004)(106356001)(14454004)(66066001)(105586002)(6116002)(3846002)(478600001)(8936002)(2351001)(74316002)(2906002)(8676002)(7736002)(55016002)(14444005)(5660300001)(7696005)(71190400001)(71200400001)(26005)(256004)(786003)(102836004)(25786009)(6506007)(97736004)(316002)(53936002)(6916009)(5640700003)(6436002)(86362001)(75432002)(2501003)(186003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB4065; H:BN7PR05MB5859.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: uconn.edu does not designate permitted sender hosts)
x-microsoft-antispam-message-info: qyNYjxKumHrcDL53/c05y/OOtSAJ6ufHIJooq0lxm/upEWiKjVo16BQfGFcV5V/N5kcFXO7+/Z5Zl0qkR/CjltjTQqI+3I4kftg3KKgHH5ALOwBPFHrQn5NMW+4kzlo5xk1QZMOedoKw/mE9KWMYAixywwRn6AXXRC2j3EOksRvHme5ddZDmUgZr+3u9dL2MB5HcnGk5rR0aI14R5yyyL/10X4TRCmKFKOrSoZs1yDuKq5HbT140yUa68VXFHY5BrI8T233rgyL9i8GthiqGgZvUwTBnWRApWLGwh2V8qadHV535dzTSrOZmfg0ICxAL
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN7PR05MB5859413851D2B772E572AD8498BE0BN7PR05MB5859namp_"
MIME-Version: 1.0
X-OriginatorOrg: uconn.edu
X-MS-Exchange-CrossTenant-Network-Message-Id: e7eb3d22-d67b-419d-fce5-08d665d13b4b
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2018 16:44:23.4408 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 17f1a87e-2a25-4eaa-b9df-9d439034b080
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4065
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-dkim/pck4dPMC2vMCmOnzbY26vFufEpw>
Subject: [Ietf-dkim] requesting help understanding DKIM logs in Postfix
X-BeenThere: ietf-dkim@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DKIM List <ietf-dkim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-dkim>, <mailto:ietf-dkim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-dkim/>
List-Post: <mailto:ietf-dkim@ietf.org>
List-Help: <mailto:ietf-dkim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-dkim>, <mailto:ietf-dkim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Dec 2018 16:44:29 -0000

Hi, I am running Postfix 2.10.x and Opendkim 2.11.0.
Mail flow is to our MX in O365 and then to smtp server for students which are on Google's Gmail.
The smtp server is configured to verify and sign.

I am trying to figure out what these lines mean ?
Thank you.

Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: not authenticated
Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: failed to parse Authentication-Results: header field
Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: bad signature data


ENTIRE LOG:
Dec 19 11:33:45 mta4 postfix/smtpd[1111]: 1C7BF1805EE6: client=mail-cys01nam02lp2054.outbound.protection.outlook.com[104.47.37.54]
Dec 19 11:33:45 mta4 postfix/cleanup[954]: 1C7BF1805EE6: warning: header Subject: 15% off sparkling wines for ringing in the New Year! from mail-cys01nam02lp2054.outbound.protection.outlook.com[104.47.37.54]; from=<tastingroom.52796@envfrm.rsys5.com>; to=<user1@uconn.edu>; proto=ESMTP helo=<NAM02-CY1-obe.outbound.protection.outlook.com>
Dec 19 11:33:45 mta4 postfix/cleanup[954]: 1C7BF1805EE6: message-id=<0.1.2BF.69E.1D497B89A604B48.0@omp.email.lot18.com>;
Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: mail-cys01nam02lp2054.outbound.protection.outlook.com [104.47.37.54] not internal
Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: not authenticated
Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: failed to parse Authentication-Results: header field
Dec 19 11:33:45 mta4 opendkim[5108]: 1C7BF1805EE6: bad signature data
Dec 19 11:33:45 mta4 postfix/qmgr[13516]: 1C7BF1805EE6: from=<tastingroom.52796@envfrm.rsys5.com>;, size=25385, nrcpt=1 (queue active)
Dec 19 11:33:45 mta4 postfix/smtp[32415]: 1C7BF1805EE6: to=<user1@gapps.uconn.edu>;, orig_to=<user1@uconn.edu>;, relay=aspmx.l.google.com[172.217.197.26]:25, delay=0.63, delays=0.32/0/0.07/0.24, dsn=2.0.0, status=sent (250 2.0.0 OK 1545237225 s127si2256693qkf.24 - gsmtp)
Dec 19 11:33:45 mta4 postfix/qmgr[13516]: 1C7BF1805EE6: removed

-ANGELO FAZZINA

ITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail

angelo@uconn.edu
University of Connecticut,  ITS, SSG, Server Systems
860-486-9075