The mailing list for listmasters using Sympa

[Joe Meslovich <address@concealed>]

Attached is a sample header where DKIM verification failed. 

Joe Meslovich 

Sent from my Verizon, Samsung Galaxy smartphone
Get Outlook for Android

---

From: IKEDA Soji <address@concealed>
Sent: Tuesday, November 14, 2023 3:08:00 AM
To: Joe Meslovich <address@concealed>
Cc: address@concealed <address@concealed>
Subject: Re: [en@sympa] Moderation messages failing DKIM verification

 

You don't often get email from address@concealed. Learn why this is important

Hi Joe,

2023/11/14 0:59:32 Joe Meslovich <address@concealed>:

> My college is in the process of trying out Sympa as a potential replacement to Mailman v2.  We are testing enabling DKIM in Sympa.  The test list is using the editorkey sending scenario. Messages being sent through the list are arriving properly signed and verified.  However when someone sends a message that is held for moderation the moderation email sent to the moderator is failing DKIM verification and going to Junk. Other messages from Sympa seem fine, but moderation messages are failing DKIM verification.

What is the "moderation email sent to the moderator" or the "moderation message"?  What is the content of its header?

Regards,
-- Soji


> I’m not seeing anything obviously wrong with the DKIM signature.  The moderation message listed a slightly different list of header values that it expects to be hashed in the verification than the other DKIM signed messages coming from Sympa.  Is there some specific setting I should be looking at for when DKIM is failing for moderation emails but not other DKIM signed messages?
>
>
> v=1; a=rsa-sha256; c=relaxed; d= rockycontender.bridgewater.edu; h=content-transfer-encoding :content-type:date:from:message-id:mime-version:reply-to:subject :to; s=sympatest; i= address@concealed; bh=XmUlIG5Q BFX1H7ckMCH0v7l6tLCVqAj9U6VqPA3mrAY=; b=jfcfOI25cKb0gviIicl7N6AM Yo/g2bW+cBG2LWTTEsi9lqegpUSs8XFPrgMWH55AZzn8u6bA+/t5/DwtOu34Y4Al 68+mQ7mbz/fsGK/vlA3JSBdO4TG0k2eJgfAiDXb7mrps6qIUBJzG7KSSn3JbbBb7 OmcwjuNgdXnURsL8jPM=
>
>
> [cid:address@concealed]
>
> *Joseph Meslovich
> */Network Administrator & IT Security Officer
> /Information Technology Center
> Bridgewater College
> Phone: 540-828-5343 | bridgewater.edu[http://www.bridgewater.edu/]
>
>
>

Received: from SJ0PR08MB7603.namprd08.prod.outlook.com (2603:10b6:a03:3e7::8)
 by PH0PR08MB8227.namprd08.prod.outlook.com with HTTPS; Mon, 13 Nov 2023
 14:13:23 +0000
Received: from BN9P220CA0014.NAMP220.PROD.OUTLOOK.COM (2603:10b6:408:13e::19)
 by SJ0PR08MB7603.namprd08.prod.outlook.com (2603:10b6:a03:3e7::8) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6977.31; Mon, 13 Nov
 2023 14:12:16 +0000
Received: from BN8NAM04FT033.eop-NAM04.prod.protection.outlook.com
 (2603:10b6:408:13e:cafe::5f) by BN9P220CA0014.outlook.office365.com
 (2603:10b6:408:13e::19) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6977.31 via Frontend
 Transport; Mon, 13 Nov 2023 14:12:16 +0000
Authentication-Results: spf=none (sender IP is 147.138.10.215)
 smtp.mailfrom=rockycontender.bridgewater.edu; dkim=fail (signature did not
 verify) header.d=rockycontender.bridgewater.edu;dmarc=none action=none
 header.from=rockycontender.bridgewater.edu;
Received-SPF: None (protection.outlook.com: rockycontender.bridgewater.edu
 does not designate permitted sender hosts)
Received: from mail.bridgewater.edu (147.138.10.215) by
 BN8NAM04FT033.mail.protection.outlook.com (10.13.161.53) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7002.17 via Frontend Transport; Mon, 13 Nov 2023 14:12:15 +0000
Received: from Exchange-Bow.Bridgewater.local (147.138.10.216) by
 Exchange-Bow.Bridgewater.local (147.138.10.216) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.2.1118.39; Mon, 13 Nov 2023 09:12:03 -0500
Received: from mailman.bridgewater.edu (147.138.10.103) by
 Exchange-Bow.Bridgewater.local (147.138.10.216) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.2.1118.39 via Frontend Transport; Mon, 13 Nov 2023 09:11:58 -0500
Received: from RockyContender.bridgewater.local ([147.138.5.63])
        by mailman.bridgewater.edu (8.14.7/8.14.7) with ESMTP id 
3ADEBwP8041281
        for <address@concealed>; Mon, 13 Nov 2023 09:11:58 -0500
Received: by RockyContender.bridgewater.local (Postfix, from userid 977)
        id 9C803C277E0F; Mon, 13 Nov 2023 09:11:58 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=
        rockycontender.bridgewater.edu; h=content-transfer-encoding
        :content-type:date:from:message-id:mime-version:reply-to:subject
        :to; s=sympatest; i=
        address@concealed; bh=OnFIHq01
        GlrzZhTFQga3OphgGjqmTOCnqJRe4p9QP+A=; b=CXl3LzR3dXUkHPoU6PZrmSOp
        dFW7F/s1cj5uZQucMDnf3jhMT2evUAws++HBH+N4ms9oTtuZr9OGcyQfWljacC+J
        k3EYHlfheUXa2kxshFOCy+SccPXJEpF9FJC9AgDVVwKN7CoQgTk1l9lTSi2UcGV9
        adtE0VXDOeq1H3dv+90=
Message-Id: <address@concealed>
Date: Mon, 13 Nov 2023 09:11:57 -0500
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Auto-Submitted: auto-generated
From: address@concealed
To: "Moderator" (netsvc-sympa) 
<address@concealed>
Subject: Message for list netsvc-sympa from address@concealed to be
 approved
Reply-To: address@concealed
Content-Type: multipart/mixed;
        boundary="_c7190a8c-c0bd-4195-a7d4-20f2ea05e4fa_"
X-Mailer: Sympa 6.2.72
Return-Path: address@concealed
X-OrganizationHeadersPreserved: Exchange-Bow.Bridgewater.local
X-MS-Exchange-Organization-ExpirationStartTime: 13 Nov 2023 14:12:15.9301
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 c82e3bf2-4ee0-47c0-b7c5-08dbe4528a26
X-EOPAttributedMessage: 0
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-MS-Exchange-Organization-SCL: 5
X-CrossPremisesHeadersPromoted:
 BN8NAM04FT033.eop-NAM04.prod.protection.outlook.com
X-CrossPremisesHeadersFiltered:
 BN8NAM04FT033.eop-NAM04.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 BN8NAM04FT033:EE_|SJ0PR08MB7603:EE_|PH0PR08MB8227:EE_
X-MS-Exchange-Organization-AuthSource: Exchange-Bow.Bridgewater.local
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: bridgewater.edu
X-MS-Office365-Filtering-Correlation-Id: c82e3bf2-4ee0-47c0-b7c5-08dbe4528a26
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Forefront-Antispam-Report:
 
CIP:147.138.10.215;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.bridgewater.edu;PTR:exchange-mck.bridgewater.edu;CAT:SPM;SFTY:9.25;SFS:(13230031)(4636009)(451199024)(19302899012)(26402899012)(82310400011)(75432002)(336012)(26005)(6266002)(44144004)(2616005)(9686003)(156005)(83380400001)(5660300002)(22186003)(1096003)(6862004)(8936002)(8676002)(15650500001)(966005)(58800400005)(37006003)(42186006)(356005)(7636003)(2292003)(6396002);DIR:INB;SFTY:9.25;
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Nov 2023 14:12:15.8989
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 
c82e3bf2-4ee0-47c0-b7c5-08dbe4528a26
X-MS-Exchange-CrossTenant-Id: 65de718b-79f3-40eb-bd7c-9c496a654384
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: 
TenantId=65de718b-79f3-40eb-bd7c-9c496a654384;Ip=[147.138.10.215];Helo=[mail.bridgewater.edu]
X-MS-Exchange-CrossTenant-AuthSource: Exchange-Bow.Bridgewater.local
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR08MB7603
X-MS-Exchange-Transport-EndToEndLatency: 00:01:07.4599293
X-MS-Exchange-Processed-By-BccFoldering: 15.20.6977.026
X-Microsoft-Antispam-Mailbox-Delivery:
        
ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003)(1420103);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:
        
=?us-ascii?Q?Jh/vDiOBGN/RbkO5lc+wJj8Y8cnuwQiMFYk6tES2R9t0kq1AMHBdwhdbNRCT?=
 =?us-ascii?Q?X2Y2hrAWKOpQAkyt+Xlmwjetx4i6pu+bplkGID3Pqwi0UJnWNrPnkXY8zOHE?=
 =?us-ascii?Q?NUmnnQmzmWcLaWzXf6mCSShzyrAvgbGsLVzVc0CPixEyr4D9GGS4PKZoOWH2?=
 =?us-ascii?Q?snF/yf96vDE1+IogJkoYdO/pMNqN6BZOuuHMO2ORR9CVhMclKnjQ63gxiZoB?=
 =?us-ascii?Q?9XKJM2c4gOQIdr8Bum65HHxg4nEnZY/MqBbs1VWIjK0dVARtXwZYZyrCumqG?=
 =?us-ascii?Q?xWBod7XW9TIya4wBglgAiwVz9pwElDfctp21QZ+Bach0BtMOG1HU7JNrCOkk?=
 =?us-ascii?Q?A6+oNgQp+zoR/tdILE0lBIjXVJB5MP+UeCk55qDZR+QC6BVFUSo88GYFX9Bt?=
 =?us-ascii?Q?dvIBASbLlmZ+RrUGBv/llF3IR0VmsXLJgBVD/NMose6j4aKQetRfximYXZFw?=
 =?us-ascii?Q?d+e7BBYFWtc2RS1WvpfA246vxwqLLotsSKwFUe4mnOzHL/a5who9qva81J/M?=
 =?us-ascii?Q?oI1eC5eQpYdj66XNM9MvmArg1MzXgJbadjN7W01mr/aqf5TeE91QPuMBcpaR?=
 =?us-ascii?Q?J6lfAfIQA5x4XyUGHp+devZQZDqs/CsEkXVVjsXRbflJKiMr7pu5QfJVi7lJ?=
 =?us-ascii?Q?Ky+2q4mOQTIYX/tPfXtAvh1aUHUS9sBBXBzHZn5WZI7OCcfxMWaFfXffA29Y?=
 =?us-ascii?Q?WF0SNUg3a/0IvrBLwaz9xempet0W4i2TJrYZHHO8z50t3T4/O3dvmRRA9w0v?=
 =?us-ascii?Q?KE28wa+tZ3gPkjpiRhw4vD01rOoAZPKX6MoeVVCYtY6T47pmtaZZbZX6/gvL?=
 =?us-ascii?Q?+1DTsPF6yT4M2IXIl3N733473mRTwHLDNefEvcE0XN/obDPUbosXv0jVgbvD?=
 =?us-ascii?Q?HyRb2IQqQ2GcrWK1DC5wlHV1m2G0GOO0WQlTLfK/HmuTGonQiIizDnAj+ohy?=
 =?us-ascii?Q?+uFFW1nERIJgyl/YKmq8WcaZrc+GO9gJi+u9WOMZFVH3oyT55XgMNfMfMefX?=
 =?us-ascii?Q?A9RzBsevL8LcluUWk8/HOzQzcS79JfLwmCdKBIaj/ZEMQ8Z5N4ansJg0SGlx?=
 =?us-ascii?Q?4TtCxsCZxzoZAXCvOEhRfK7BvI3m4FGIVhs3d/UJf0OLZ4f31TPUavA+xE/K?=
 =?us-ascii?Q?CfzcMgNkHgvxi29dufoVhs2XsuquE2dyrRYYCRkPLZSPAmpbjIXdE4M9Di+U?=
 =?us-ascii?Q?CgqLkrr17KzfvwU6suyaMUUC3H9WBRmQSjrnu067uYe0PPURS9JDWuo90C95?=
 =?us-ascii?Q?O4Ye59WV2IPr/eFE17UOhIpnVWfDbBhH7xy7Z5DBLv13Zc94kKJrNblGYLKm?=
 =?us-ascii?Q?ANa28k5wPc6/0v+rsv0BpnXPL9DY6BydR3bFqKbyvI1gVcSuy3fLbd22Cr6C?=
 =?us-ascii?Q?TPdSsyC3yEoX1LFQQQmQmsAG39UPLTPbtONmQgaq8BpuiB6SmLPcCF5lq01W?=
 =?us-ascii?Q?R+/EadAci/7i9XWBrMOqZVrhiGThmW39qNqj0usW/egf1g7m6dnnyDRJwBM0?=
 =?us-ascii?Q?MS+HA3vHrXNjL41m+/6QWERYi6yaZtgOhBVrIdk4eGXPFIJocYwwF54HJqWs?=
 =?us-ascii?Q?XBhRkeH1eV//x8AEBIEXNo5Mkt+YfdVSJgANXisT3Z+Jsgux9y156Dzmku6O?=
 =?us-ascii?Q?gTDVI2aDQvgW7ZY/IZnJdS2qluyUnmjOWr/4KpdB93X4oRo8X+HoiTilZbCe?=
 =?us-ascii?Q?cDyELeDT926BrKRGpwLLqd01l+dB7o1D+ItQoqGPiUZJBwpXRlnvsGTTSRlU?=
 =?us-ascii?Q?XBhyNdYFjF2OUCdHgASV17rHJDLcy2YTADKh9XktDcyjwEnypyeSZxlR8jxY?=
 =?us-ascii?Q?PBpcJR1RpWxytiAtgBuOHqkUAJ/9WfqbHR2d49it5dEiF5ouo5O0YID5PfI7?=
 =?us-ascii?Q?V0+1oncGa9CQAsHFoL7Vuojn1B1OJcvCZGGIYeUOGyS/4xrHAF6E6h3iAeNm?=
 =?us-ascii?Q?MJJmBjOTjL6DBtplEOlZ3Pi5VwqVdwUh+W0w1811YokcLz+T1tQX+wnmD6Ep?=
 =?us-ascii?Q?8f18ch58lNTf/aDSat/OXOEzJmQWkpqypJQLghMuOMKxMuEwu01BYe2/fi8n?=
 =?us-ascii?Q?C5xysF249LrN4U9VKmLATCmhuTxPeWVDTJle/RJ5vQM5P3wt3ltrEq6ChD+J?=
 =?us-ascii?Q?eN2sifQhet4hGT8i5qfgFJH999B/aob67yLo+4h23+2BR9L8W5ONHEIRgHcg?=
 =?us-ascii?Q?NPpsM92nw/ns1vX48DeAqA3/dhzf3lfHJTCgBJiIyLAsFgGkzcS4ZUJCjws0?=
 =?us-ascii?Q?qJtVzkLJ3Crh6JcjgN5j0glrBMVdsX+2JewwO6Kgvk5z2p7IRCaMeItHVtsl?=
 =?us-ascii?Q?AVd6IkzEsrglyQTh+RJd0hGsSK5V/KDgjxQpSMHkhXoqyZMa/RNJoHw7S3Y/?=
 =?us-ascii?Q?qnUN0ArNqE0DOVRRoqUu6YfzsN/AikQS1d6GaTN+8Azx0hNuFcBq9Y5r38Af?=
 =?us-ascii?Q?roCBY6QdH8YguPxhsFT77WIrMwEAomLbh6eBpmAUnL6mJm8d980MSiBhbQhe?=
 =?us-ascii?Q?NZLwN7LY6I39VpU=3D?=