Onderwerp: DKIM test goed, hotmail: temperror

Goeie middag iedereen.

Ik zit met een DKIM signature te testen en krijg hem maar niet werkend.

Online DKIM test:
http://dkimcore.org/c/keycheck

• selector= x
• domain= verenigingensoftware.nl

Hotmail resultaat:

Code:

x-store-info:4r51+eLowCe79NzwdU2kRyU+pBy2R9QCQ1WNUtV+VDcDryx17CzWY7KaMQV0cWB+Hyj7dtVBCwCUf32Cp23zx8kRPioIHjROClT/yFtiVFjIJynlR9GoKYJ6A3GPQXyhNhufJ7Voryg= Authentication-Results: hotmail.com; spf=pass (sender IP is 195.216.246.25) smtp.mailfrom=s.lohuis@verenigingensoftware.nl; dkim=temperror header.d=verenigingensoftware.nl; x-hmca=pass X-SID-PRA: s.lohuis@verenigingensoftware.nl X-AUTH-Result: PASS X-SID-Result: PASS X-Message-Status: n:n X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD00 X-Message-Info: 11chDOWqoTlLWRA09TzpKCqRh7OQvJC929oFHbdQhGMw6SqoQPUPhsRId3gjee2cs0RUZOraMWr7AvEv/ooVnZvIj8OnXHKRPX551q9pAEZtntd1apztiGXE+ZWVxYAlZXnVGamk+wq6eCmzMKz09hlGc2TpFW7w Received: from vps245.mortydot.com ([195.216.246.25]) by COL0-MC1-F14.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);      Wed, 2 Jan 2013 06:41:24 -0800 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=verenigingensoftware.nl; s=x;     h=Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:From:Date:Message-ID; bh=TngI6sumeanS64q27aVBfuIGCRnJ6/OVsFLLgkHhG9s=;     b=HJR9OOiaWVXJ4UmNouZ17Io9NdkOgGTkezA/AeYVYMrRLy567PodVHHhmhehrHxb/7EPTc7X0WqGllDCpKv8QsqZtydlE2nyEHwPoQacpfdJiPNtPKLEapxGhYFerg4q71WGwM8U/3chQFJucGIPEnHtAjk+ZCWlUlhg7s9vCxR1Rk+zioiJT3tHi6pUTIv4rrdyMR9R+xDvF59UBKf+CcsExKpGSTefOUNXF6QyfIxqjHf2dVz2gOoOrD2yQoQPH8DyZXEkNrq9XMCsjyMiF2txvSlhVjtxBBb7BSJtVPTeGJrC5zqxB2uVHYfRoL1TazoJitJv5LpOeNs/PhIGOg==; Received: from 5249287d.cm-4-2a.dynamic.ziggo.nl ([82.73.40.125] helo=[192.168.178.13])     by vps245.mortydot.com with esmtpa (Exim 4.80.1)     (envelope-from <s.lohuis@verenigingensoftware.nl>)     id 1TqPVS-00036N-W2     for svenlohuis@hotmail.com; Wed, 02 Jan 2013 15:41:23 +0100 Message-ID: <50E44715.2090507@verenigingensoftware.nl> Date: Wed, 02 Jan 2013 15:41:25 +0100 From: Sven Lohuis <s.lohuis@verenigingensoftware.nl> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: svenlohuis@hotmail.com Subject: test 4 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-Path: s.lohuis@verenigingensoftware.nl X-OriginalArrivalTime: 02 Jan 2013 14:41:24.0471 (UTC) FILETIME=[3D2FA070:01CDE8F7]  test 5

Ik krijg de dkim=temperror er maar niet uit. Iemand een idee waarom of hoe dit kan?

Hoe oud is de DNS record? DKIM werkt met de DNS en als de cache nog niet is verlopen krijg je tijdelijke error.

Een paar uur nu (laatste wijziging) en ervoor een paar dagen.

Nog wat test resultaten van een andere test tool (http://www.port25.com/support/authen...-verification/)



This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com. The service allows email senders to perform
a simple check of various sender authentication mechanisms. It is provided
free of charge, in the hope that it is useful to the email community. While
it is not officially supported, we welcome any feedback you may have at
<verifier-feedback@port25.com>.

Thank you for using the verifier,

The Port25 Solutions, Inc. team

================================================== ========
Summary of Results
================================================== ========
SPF check: pass
DomainKeys check: neutral
DKIM check: pass
Sender-ID check: pass
SpamAssassin check: ham

================================================== ========
Details:
================================================== ========

HELO hostname: vps245.mortydot.com
Source IP: 195.216.246.25
mail-from: s.lohuis@verenigingensoftware.nl

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass
ID(s) verified: smtp.mailfrom=s.lohuis@verenigingensoftware.nl
DNS record(s):
verenigingensoftware.nl. SPF (no records)
verenigingensoftware.nl. 14400 IN TXT "v=spf1 a mx ip4:195.216.246.25 ~all"
verenigingensoftware.nl. 14400 IN A 195.216.246.10
verenigingensoftware.nl. 14400 IN MX 10 mail.verenigingensoftware.nl.
verenigingensoftware.nl. 14400 IN MX 20 spam.verenigingensoftware.nl.
mail.verenigingensoftware.nl. 14399 IN A 195.216.246.25

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified: header.From=s.lohuis@verenigingensoftware.nl
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: pass (matches From: s.lohuis@verenigingensoftware.nl)
ID(s) verified: header.d=verenigingensoftware.nl
Canonicalized Headers:
content-transfer-encoding:7bit'0D''0A'
content-type:text/plain;'20'charset=ISO-8859-1;'20'format=flowed'0D''0A'
subject:Authentication'20'Test'0D''0A'
to:check-auth2@verifier.port25.com'0D''0A'
mime-version:1.0'0D''0A'
from:Sven'20'Lohuis'20'<s.lohuis@verenigingensoftw are.nl>'0D''0A'
date:Wed,'20'02'20'Jan'20'2013'20'19:10:13'20'+010 0'0D''0A'
message-id:<50E47805.3050008@verenigingensoftware.nl>'0D'' 0A'
dkim-signature:v=1;'20'a=rsa-sha256;'20'q=dns/txt;'20'c=relaxed/relaxed;'20'd=verenigingensoftware.nl;'20's=x;'20' h=Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:Fromate:Message-ID;'20'bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;'20'b=;

Canonicalized Body:
test'0D''0A'


DNS record(s):
x._domainkey.verenigingensoftware.nl. 14400 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPUK fLK0ZyiuOitpPDjw8JCQ3MOs+ybnbjZSmULxzyrE3Fybda9B0H 8ENX9YrUMIVn3IIPKcUvv8MLIwBXVPsz1vQ5IRJUO30rmVMHoX AGbsIqWcAtmHNADCMq2zP5VktfslmbgMIDlmoBlFKuAwZ3Mo72 7wV2Ykj39NtKK5+k1L51DEbdu/Qh3ovwkZUtt7CvLeNmDOB0ON3num81wMWmjh9v4zCVwsmpCL5W F/XCdPXmD4PC7nmim+SnJnSHy6BpZugBC9wGlWrSCFwziStAHbep hkpXQ81VaER1bL7lFne4zh8vCXDF1zb8IEmabnWlUHth5umzU8 UUKxIy+9IQIDAQAB"

NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.

----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result: pass
ID(s) verified: header.From=s.lohuis@verenigingensoftware.nl
DNS record(s):
verenigingensoftware.nl. SPF (no records)
verenigingensoftware.nl. 14261 IN TXT "v=spf1 a mx ip4:195.216.246.25 ~all"
verenigingensoftware.nl. 14215 IN A 195.216.246.10
verenigingensoftware.nl. 14216 IN MX 10 mail.verenigingensoftware.nl.
verenigingensoftware.nl. 14216 IN MX 20 spam.verenigingensoftware.nl.
mail.verenigingensoftware.nl. 14216 IN A 195.216.246.25

----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.3.1 (2010-03-16)

Result: ham (-2.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO

================================================== ========
Explanation of the possible results (from RFC 5451)
================================================== ========

SPF and Sender-ID Results
=========================

"none"
No policy records were published at the sender's DNS domain.

"neutral"
The sender's ADMD has asserted that it cannot or does not
want to assert whether or not the sending IP address is authorized
to send mail using the sender's DNS domain.

"pass"
The client is authorized by the sender's ADMD to inject or
relay mail on behalf of the sender's DNS domain.

"policy"
The client is authorized to inject or relay mail on behalf
of the sender's DNS domain according to the authentication
method's algorithm, but local policy dictates that the result is
unacceptable.

"fail"
This client is explicitly not authorized to inject or
relay mail using the sender's DNS domain.

"softfail"
The sender's ADMD believes the client was not authorized
to inject or relay mail using the sender's DNS domain, but is
unwilling to make a strong assertion to that effect.

"temperror"
The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability to
retrieve a policy record from DNS. A later attempt may produce a
final result.

"permerror"
The message could not be verified due to some error that
is unrecoverable, such as a required header field being absent or
a syntax error in a retrieved DNS TXT record. A later attempt is
unlikely to produce a final result.


DKIM and DomainKeys Results
===========================

"none"
The message was not signed.

"pass"
The message was signed, the signature or signatures were
acceptable to the verifier, and the signature(s) passed
verification tests.

"fail"
The message was signed and the signature or signatures were
acceptable to the verifier, but they failed the verification
test(s).

"policy"
The message was signed but the signature or signatures were
not acceptable to the verifier.

"neutral"
The message was signed but the signature or signatures
contained syntax errors or were not otherwise able to be
processed. This result SHOULD also be used for other
failures not covered elsewhere in this list.

"temperror"
The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability
to retrieve a public key. A later attempt may produce a
final result.

"permerror"
The message could not be verified due to some error that
is unrecoverable, such as a required header field being
absent. A later attempt is unlikely to produce a final result.


================================================== ========
Original Email
================================================== ========

Return-Path: <s.lohuis@verenigingensoftware.nl>
Received: from vps245.mortydot.com (195.216.246.25) by verifier.port25.com id hshsjc11u9c4 for <check-auth2@verifier.port25.com>; Wed, 2 Jan 2013 13:14:48 -0500 (envelope-from <s.lohuis@verenigingensoftware.nl>)
Authentication-Results: verifier.port25.com; spf=pass smtp.mailfrom=s.lohuis@verenigingensoftware.nl
Authentication-Results: verifier.port25.com; domainkeys=neutral (message not signed) header.From=s.lohuis@verenigingensoftware.nl
Authentication-Results: verifier.port25.com; dkim=pass (matches From: s.lohuis@verenigingensoftware.nl) header.d=verenigingensoftware.nl
Authentication-Results: verifier.port25.com; sender-id=pass header.From=s.lohuis@verenigingensoftware.nl
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=verenigingensoftware.nl; s=x;
h=Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:Fromate:Message-ID; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
b=BZErgSb8XjSPTcMECyyFT33A8TolssNtwuKOZMRuLe374Q4m s6Q70C/A9AujBarWkGZ4Ehv2edTeCFUGH8tLXQXBV1w6CStMUbJyx09TV vai+YwuH6xdoQUCrSQRQTfGlotNWZQ7NEwlYdXcCB/XPgr3MDFzNcMzre4ebEPz4wXRglQNS7Z47/n/kBhb8ZPZKItJAwpNAqEFG30mjf9wx36lrps9SaIcr1N4JMYapu 73ZqFn/f06EdvdcnXKa608WPZSCgOtufklxCMrJM4nDHeTHzSGnYjfi4+ MsHEl03WTSAI86O0G9Nz1v9cCWnxZk7Y9UhOAzQF2JtCRUkxKt Q==;
Received: from 5249287d.cm-4-2a.dynamic.ziggo.nl ([82.73.40.125] helo=[192.168.178.13])
by vps245.mortydot.com with esmtpa (Exim 4.80.1)
(envelope-from <s.lohuis@verenigingensoftware.nl>)
id 1TqSlX-0005aU-6w
for check-auth2@verifier.port25.com; Wed, 02 Jan 2013 19:10:11 +0100
Message-ID: <50E47805.3050008@verenigingensoftware.nl>
Date: Wed, 02 Jan 2013 19:10:13 +0100
From: Sven Lohuis <s.lohuis@verenigingensoftware.nl>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: check-auth2@verifier.port25.com
Subject: Authentication Test
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

test

De DNS-configuratie van verenigingensoftware.nl is stuk, er is geen A-record voor ns2.verenigingensoftware.com. Ik vermoed dat dit het probleem veroorzaakt bij Hotmail, terwijl bij meer vergevende resolvers het domein gewoon blijft werken. Een temperror met DKIM is 9 van de 10 keer een DNS-issue.

@nederhost, thnx klopt inderdaad dat die niet klopt. bijgewerkt en over paar uurtjes weer testen. Hou jullie op de hoogte!

Hotmail is niet echt een partij waarmee ik zou testen of je DomainKeys goed zijn. Bij onze DomainKeys zegt Hotmail soms Pass en soms Softfail of Temperror. Is geen pijl op te trekken. Gmail geeft altijd een Pass.

Hotmail hebben we ook niet gebruikt om te testen. Alle test tools online gaven aan dat het werkte. Hotmail gaf als enige problemen. Echter bestaat een groot deel van de ontvangers wel uit hotmail adressen waardoor we het ook belangrijk vinden dat hotmail geen problemen gaf.