Hi dear email geeks!
I'm having an issue with gmail saying that the original DKIM is failing after the message is being forwarded (using SRS).
The situation is as follows:
- I receive an email on my host: analyze.email (from e.firstdomain.nl)
- Authentication on SPF, DKIM (and DMARC) are valid (for e.firstdomain.nl)
- It is being forwarded to gmail (with SRS and DKIM on analyze.email)
- Gmail is throwing me an DKIM=fail on the DKIM fore.firstdomain.nl and pass on DKIM/SPF (due SRS) for analyze.email.
a part of the headers (by gmail):
Code:
Return-Path: <SRS0=erKM=2D=e.firstdomain.nl=bounce-staging1-44OMnUpZ45zH_Jb-w1Cb03Q@analyze.email>
Received: from analyze.email (analyze.email. [85.214.255.71])
by mx.google.com with ESMTPS id y84si1819965wmg.16.2017.02.22.01.08.41
for <mygmailbox@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 22 Feb 2017 01:08:41 -0800 (PST)
Received-SPF: pass (google.com: domain of srs0=erkm=2d=e.firstdomain.nl=bounce-staging1-44omnupz45zh_jb-w1cb03q@analyze.email designates 85.214.255.71 as permitted sender) client-ip=85.214.255.71;
Authentication-Results: mx.google.com;
dkim=pass header.i=@analyze.email;
dkim=fail header.i=@e.firstdomain.nl;
spf=pass (google.com: domain of srs0=erkm=2d=e.firstdomain.nl=bounce-staging1-44omnupz45zh_jb-w1cb03q@analyze.email designates 85.214.255.71 as permitted sender) smtp.mailfrom=SRS0=erKM=2D=e.firstdomain.nl=bounce-staging1-44OMnUpZ45zH_Jb-w1Cb03Q@analyze.email
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=analyze.email; s=default; t=1487754520; bh=jG6BhcoL2j0c3l/jRQRQa+I3DIGLfvBkXnvXBn4WpYY=; l=31123; h=Received:Received:Received:From:Subject:To; b=VX58a3V3tv77qWz7LjzrJEfK3NqglC2GKeKPABV3NKrv13D3ffgT8AfxF8hS6Ot8K
XAEq371NrZF5dPRIKw5qmK8A+NXceuTN/BFWjG0G7GV9AXwaj4K6qsPsfeGy+lvWW2
ZLtP37yx9mSLdwlPZ64RrMYEJ/2nQl0tuqE3qBEk=
Authentication-Results: analyze.email; dkim=pass (good signature) header.i=bounce-staging1-44OMnUpZ45zH_Jb-w1Cb03Q@e.firstdomain.nl
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=feb2015; d=e.firstdomain.nl; h=Content-Transfer-Encoding:From:Subject:To:List-Unsubscribe:MIME-Version:Content-Type:Message-Id:Date; i=nieuwsbrief@e.firstdomain.nl;
bh=jG6BhcoL2j0c3l/jRQRQa+I3DIGLfvBkXnvXBn4WpYY=; b=Mp6se7mCc4AcSgNvETAzAwtaep/crk+9b8+eMjNFKsY7aZ52YfGZbxL6Pdo/Bgx71zZDmUriJmS1 qeTNnYq5C/VJziLTFRs0M284qhq8mFFWF+36BY4QpwAzTgjpfZAEEcLJKTPsRWK6xvALywSdOEXQ cmCE99Pf7n1L1UH/+Lp3oLu7k5aZiNgxsJCL98sB6FTeef7Sc5qnv+MoFT3qFU4ot9LrMhRNccUj M4ReHGDl+0434JeQ4GclNRluwBHMe86t/9sFIxmpAW8yWMRjQMGslA/BPDIZfi8p0AzlQQ8siHlP 7mHYVJjB2icddwR1JWm6ixmq7LjQidpRNEa7ug==
(the original domain is altered to 'e.firstdomain.nl', the selector is valid and DKIM passed in the mailbox before forwarding it to gmail)
Any ideas how to fix the above?