NethServer Version: NethServer 7.9.2009
Module: Roundcube/Dovecot/DKIM
Greetings All,
Over the weekend I had an issue with a telemetry device on another domain (livemedia.co.nz) that emails equipment status messages to a mailing list, and attempted to temporarily relay messages from a replacement device on my system (numbergod.net) to its original mailserver.
After reversing any changes I can remember making, and restoring a configuration backup from before the changes were made, I find that Roundcube filters to “Send message copy to” any (external) Gmail address fails.
Gmail is now rejecting them, with
550-5.7.26 The MAIL FROM domain [livemedia.co.nz] has an SPF record with a hard 550-5.7.26 fail policy (-all) but it fails to pass SPF checks with the ip: 550-5.7.26 [210.54.32.136]. To best protect our users from spam and phishing, 550-5.7.26 the message has been blocked. Please visit 550-5.7.26 Email sender guidelines - Google Workspace Admin Help for more 550 5.7.26 information.
Which I understand. As the Email passes through my system, the “From” address header still shows the original domain, and that fails the SPF check as designed.
Dovecot? IS adding a header
X-Sieve-Redirected-From: telemetry@numbergod.net
But Gmail doesn’t appear to honour the new redirection domain name which WOULD pass SPF.
There are also no DKIM headers added to the Dovecot forwarded messages, although there are for normal Thunderbird accounts.
Unfortunately, I am unable to view any old messages to see if any other headers have changed.
I suspect, that there’s some remnant of the temporary domain lurking in a config that wasn’t overwritten by the restored backup, and that’s causing Dovecot to not recognise the domain as external and requiring header modification/masquerading.
Any suggestions gratefully received.
Many thanks,
Don.
==============headers of gmail rejected message below===================
Return-Path: noreply@livemedia.co.nz
Received: by neth.numbergod.net (Postfix, from userid 985)
id 1FE0D1829; Tue, 22 Nov 2022 21:21:59 +1300 (NZDT)
X-Sieve: Pigeonhole Sieve 0.4.24 (124e06aa)
X-Sieve-Redirected-From: telemetry@numbergod.net
Message-ID: dovecot-sieve-1669105319-99504-1@neth.numbergod.net
Delivered-To: telemetry@numbergod.net
Received: from neth.numbergod.net
by neth.numbergod.net with LMTP id cAQABKeGfGNVfQAAWWsXwA
for telemetry@numbergod.net; Tue, 22 Nov 2022 21:21:59 +1300
Received: from neth.livemedia.co.nz (mail.broadcastmedia.tv [103.19.11.209])
by neth.numbergod.net (Postfix) with ESMTPS id E196A10225
for telemetry@numbergod.net; Tue, 22 Nov 2022 21:21:55 +1300 (NZDT)
Received: from 127.0.0.1 (unknown [192.168.1.115])
by neth.livemedia.co.nz (Postfix) with SMTP id 5F74258443
for telemetry@livemedia.co.nz; Tue, 22 Nov 2022 21:21:55 +1300 (NZDT)
Subject: Telemetry
Content-type: text/plain; charset=“iso-8859-1”
From: noreply@livemedia.co.nz
To: telemetry-mailing-list@livemedia.co.nz
X-Rspamd-Server: neth.numbergod.net
X-Rspamd-Queue-Id: E196A10225
X-Spamd-Result: default: False [0.00 / 20.00];
ASN(0.00)[asn:55561, ipnet:103.19.10.0/23, country:NZ];
FROM_WHITELIST(0.00)[noreply@livemedia.co.nz]
X-Rspamd-Pre-Result: action=no action;
module=multimap;
Matched map: FROM_WHITELIST
Date: Tue, 22 Nov 2022 21:21:59 +1300 (NZDT)