[Bug 7201] Whitelist_auth for VERP-esque emails does not work

[bu...@bugzilla.spamassassin.org]

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7201

--- Comment #1 from Mark Martinec <Ma...@ijs.si> ---
> A whitelist_auth entry for wizard@whitepaperwizard.com was entered. 
> However, the email is sent via mailchimp where the DKIM and SPF are
> VERP-esque encoded entries for mcdlv.net.
> 
> For example, the relevant headers/envelope for this email pass SPF and DKIM
> but don't pass whitelist_auth for wizard@whitepaperwizard.com.  Is this a
> bug?  Is this something we can address?

> Return-Path:
>   <bo...@mail32.wdc01.mcdlv.net>

> DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1;
>   d=mail32.wdc01.mcdlv.net;

> From: <wi...@whitepaperwizard.com>

With DKIM the whitelist_auth checks for author-domain signature,
not just any third-party signature. In this case the author domain is
whitepaperwizard.com but the signing domain is mail32.wdc01.mcdlv.net.

For DKIM-whitelisting third-party signatures you need to use:
  whitelist_from_dkim wizard@whitepaperwizard.com mail32.wdc01.mcdlv.net
(the first arg may be wildcarded if necessary).

Don't know about SPF.

-- 
You are receiving this mail because:
You are the assignee for the bug.