DKIM Error on 5.7.0-B2572 (x64)

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-21 20:29

Hello,

I have about 4-5% of DKIM lookup failures on my built 5.7.0-B2572 (x64) of which a lot are microsoft hosted domains:

"DKIM: Error xxxwhen retrieving public key. Failed to do DNS/TXT lookup."
"DEBUG" 5248 "2021-09-21 12:35:07.739" "DKIM: Retrieval of public key failed."

About 43 of every 1000 lookups fail with no other issue being on the local DNS-server.

Manual lookups always complete successfully: see below!

DNS-server listens on all interfaces: localhost, internetfacing adapter and domainfacing adapter (no gateway) with all of them pointing to 127.0.0.1 as DNS-address.

I have read about a fix somewhere on this forum for time-outs on dns-lookups but I don't have any clue on how to implement this.

Thanks in advance for any help on this.



> selector1-arnescobv-onmicrosoft-com._domainkey.arnescobv.onmicrosoft.com
Server: localhost
Address: 127.0.0.1

Non-authoritative answer:
selector1-arnescobv-onmicrosoft-com._domainkey.arnescobv.onmicrosoft.com
text =

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTHLcKYR
u1KFdDzSmUjyCW0g+5pFFLxJbnXPoFMAPGkfnq/4UVxUYEzO4yQH/L2hWGvDvkUqB+mTPEG+MeJzgGV8
RbyzR5HpCF6AvGY8zG1akkvHg0CgGLDulLl8RFbLVKHv5Lejz7UpORYsPFHUa7K7HU2JRcGzX5KkJL/2
eYSZpUQa5d/yzHPmD06ijuly"
"jaYVVYfv7LBzBEw8y5BmCwNz4YAiVKaqqsTwNJyXPriNQxY/wizxvNKVC7czxRIzx1I62G2
MC9xWsJWsHGh/xQA9b7fIUa0ItFprC8PpdqGbPWbKeyBGGRXAnkfSb6uVR7ZvMo3ubwcpX1mha7O7QID
AQAB;"
>
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-21 22:48

DNS TXT records can only be 255 characters in length. That fits with the line break which is for at 2048 bit key.

https://www.unixfu.ch/how-to-split-dns-dkim-records/

1024 bit keys fits inside the 255 char limit :idea:
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

mikedibella
Senior user
Senior user
Posts: 568
Joined: 2016-12-08 02:21

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by mikedibella » 2021-09-21 23:10

SorenR wrote:
2021-09-21 22:48
DNS TXT records can only be 255 characters in length.
Ideally, yes, but in this case, Microsoft is controlling the namespace where the records are hosted, so that guidance isn't going to help the OP.

@berg128: Is the local DNS server using root hints or forwarders? If you are using forwarders, try adding 1-2 seconds to the forwarding timeout, so long as the result is limited to 10 seconds max.

If you are using root hints, try adding a conditional forwarder for onmicrosoft.com and set the forwarding timeout to 5 seconds.

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-21 23:31

SorenR wrote:
2021-09-21 22:48
DNS TXT records can only be 255 characters in length.
Thanks SorenR, situation is like Mikedibella states so no options there

@Mikedibella

Server is using root hints so I will test your solution.

Thanks!
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-21 23:42

mikedibella wrote:
2021-09-21 23:10
SorenR wrote:
2021-09-21 22:48
DNS TXT records can only be 255 characters in length.
Ideally, yes, but in this case, Microsoft is controlling the namespace where the records are hosted, so that guidance isn't going to help the OP.

@berg128: Is the local DNS server using root hints or forwarders? If you are using forwarders, try adding 1-2 seconds to the forwarding timeout, so long as the result is limited to 10 seconds max.

If you are using root hints, try adding a conditional forwarder for onmicrosoft.com and set the forwarding timeout to 5 seconds.
It was my observation, nothing more.
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-22 13:40

https://github.com/hmailserver/hmailserver/issues/382

Isn't this, sort of the same issue?
HMS seems to handle 1024 bit keys correct, but fails on 2048 bit keys, right?
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
jim.bus
Senior user
Senior user
Posts: 787
Joined: 2011-05-28 11:49
Location: US

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by jim.bus » 2021-09-23 07:29

SorenR wrote:
2021-09-21 22:48
DNS TXT records can only be 255 characters in length. That fits with the line break which is for at 2048 bit key.

https://www.unixfu.ch/how-to-split-dns-dkim-records/

1024 bit keys fits inside the 255 char limit :idea:
Just for information only. It appears TXT Records can be more than 255 characters. The limit is actually apparently 255 characters per string. You can supposedly have multiple strings and the total number of characters therefore can exceed 255 characters when you combine the multiple strings. I believe a long time ago I did this myself when I used a 2048 bit Key with multiple strings.

Virinum
Normal user
Normal user
Posts: 165
Joined: 2018-11-23 14:42
Location: Germany

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by Virinum » 2021-09-23 08:19

I use 2048 bit DKIM keys. When I added it to my nameserver, I had to use this syntax: https://kb.isc.org/docs/aa-00356

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 09:03

All,

I think I have found the same issue here viewtopic.php?t=34834

The DNS Conditional forwarder does not solve the problem
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 10:56

Virinum wrote:
2021-09-23 08:19
I use 2048 bit DKIM keys. When I added it to my nameserver, I had to use this syntax: https://kb.isc.org/docs/aa-00356
Does HMS properly concatenated that string and validate such DKIM signature?
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 11:00

berg128 wrote:
2021-09-23 09:03
All,

I think I have found the same issue here viewtopic.php?t=34834

The DNS Conditional forwarder does not solve the problem
That should be fixed in 5.7.0-B2572, eg: this https://github.com/hmailserver/hmailserver/pull/372 fix is committed in this build
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 11:28

@RvdH

I think HMS does not validate split dkim well which is my problem.

The fix actually describes another problem and the fix for that.

viewtopic.php?t=34834 also mentioned my problem and it seems that hasn't been fixed yet?
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 12:08

berg128 wrote:
2021-09-23 11:28
@RvdH

I think HMS does not validate split dkim well which is my problem.

The fix actually describes another problem and the fix for that.

viewtopic.php?t=34834 also mentioned my problem and it seems that hasn't been fixed yet?
HMS by default uses system configured DNS, if system DNS resolution isn't working properly i can imagine HMS has trouble doing DNS lookups, you might consider to bypass DNS cache, it think SorenR posted registry changes somewhere that allow you to bypass caching
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 12:42

Thanks RvdH but...

System DNS has no issues, all lookups return proper results.

Also DNS caching isn't the problem either. It's HMS who doesn't interpret DNS/TXT results correctly as far as I can see.

See my original posting for an example of a lookup which fails..

Every failed lookup by HMS has split/longer TXT records I can confirm.
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
jim.bus
Senior user
Senior user
Posts: 787
Joined: 2011-05-28 11:49
Location: US

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by jim.bus » 2021-09-23 12:48

RvdH wrote:
2021-09-23 12:08
berg128 wrote:
2021-09-23 11:28
@RvdH

I think HMS does not validate split dkim well which is my problem.

The fix actually describes another problem and the fix for that.

viewtopic.php?t=34834 also mentioned my problem and it seems that hasn't been fixed yet?
HMS by default uses system configured DNS, if system DNS resolution isn't working properly i can imagine HMS has trouble doing DNS lookups, you might consider to bypass DNS cache, it think SorenR posted registry changes somewhere that allow you to bypass caching
Rather than bypass DNS Cache, the problem might be resolved by just flushing the DNS as DNS Cache can become too full or otherwise corrupted. To flush DNS Cache you should be able to do this by opening an elevated Command Prompt (Administrator) then issuing the command ipconfig /flushdns.

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 12:58

jim.bus wrote:
2021-09-23 12:48
RvdH wrote:
2021-09-23 12:08
berg128 wrote:
2021-09-23 11:28
@RvdH

I think HMS does not validate split dkim well which is my problem.

The fix actually describes another problem and the fix for that.

viewtopic.php?t=34834 also mentioned my problem and it seems that hasn't been fixed yet?
HMS by default uses system configured DNS, if system DNS resolution isn't working properly i can imagine HMS has trouble doing DNS lookups, you might consider to bypass DNS cache, it think SorenR posted registry changes somewhere that allow you to bypass caching
Rather than bypass DNS Cache, the problem might be resolved by just flushing the DNS as DNS Cache can become too full or otherwise corrupted. To flush DNS Cache you should be able to do this by opening an elevated Command Prompt (Administrator) then issuing the command ipconfig /flushdns.
berg128 wrote:
2021-09-23 12:42
Thanks RvdH but...

System DNS has no issues, all lookups return proper results.

Also DNS caching isn't the problem either. It's HMS who doesn't interpret DNS/TXT results correctly as far as I can see.

See my original posting for an example of a lookup which fails..

Every failed lookup by HMS has split/longer TXT records I can confirm.
So, thanks Jim.bus but that doesn't help
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 13:07

I currently have no domains using 2048 bit DKIM keys (concatenated strings) in use, so i can't test this easily/properly.
Hence the reason i asked Virinum to confirm/deny if that is working OK for him

On my own "private" HMS instance, i have only found 1 entry (this month)
Unfortunately i do not have the corresponding message (it was a message to my sisters mailbox) i need to find the DKIM selector to verify the DKIM signature existence/validation

Code: Select all

"DEBUG"	4848	"2021-09-17 03:47:30.072"	"DKIM: Error when retrieving public key. No key for signature."
"DEBUG"	4848	"2021-09-17 03:47:30.072"	"DKIM: Retrieval of public key failed."
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 13:31

I have 2048 bit DKIM keys on my domains but I notice this:

My domain gives results in chunks of approx. 150 while the domains giving the error uses chunks of 255 length.

My domain

text =

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CauytyGCFjDs0vV8FOhiUwIYL6FBP5n5ACY5cyxcvXlq8iXwQFnfApN92nM5hSvSPNlREk/vj/jfXltSsC0rO/"
"NUP7qLa6tvsW/F32JzM+eU1XuGo9BWGTwTL5r1UI1sIUHPSyJWD/K8Irx5fTDAaIC5q9YmKZBI54xfFWSXguHS3u/+HWNYxZXDBg6xHzHHbl5hsvSkS1n4qyJ3/xzVOlBsBgaKwf5ySJdMXX3kIj7K"
"vNBx0gJfrw7WkmlYSH9tAuYD1vMW8hTx3i5v9ISP0DSCVQjpQm5sFZH9iD2ZK8IwbUGV8/lSw++AzmeZUH6l7DLj2/dZBAsCK3B+1c7MQIDAQAB"

Example domain from original post

text =

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTHLcKYRu1KFdDzSmUjyCW0g+5pFFLxJbnXPoFMAPGkfnq/4UVxUYEzO4yQH/L2hWGvDvkUqB+mTPEG+MeJzgGV8RbyzR5HpCF6AvGY8zG1akkvHg0CgGLDulLl8RFbLVKHv5Lejz7UpORYsPFHUa7K7HU2JRcGzX5KkJL/2eYSZpUQa5d/yzHPmD06ijuly"
"jaYVVYfv7LBzBEw8y5BmCwNz4YAiVKaqqsTwNJyXPriNQxY/wizxvNKVC7czxRIzx1I62G2MC9xWsJWsHGh/xQA9b7fIUa0ItFprC8PpdqGbPWbKeyBGGRXAnkfSb6uVR7ZvMo3ubwcpX1mha7O7QIDAQAB;"
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 13:36

Should that last semicolon (next to closing quote) in example from original post be there to begin with?
Not sure if that would invalidate a DKIM signature in HMS

The way how a DNS lookup response is chunked up is entirely up to the DNS resolver (allowed packet size configured on the DNS server) i think

[EDIT]
FYI, i found the corresponding message (it was a spam mail, so i found it my spambox)
https://mxtoolbox.com/SuperTool.aspx?ac ... n=toolpage

The record used is indeed not valid in this case, so looks like HMS did good there
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 14:13

I just checked and verified the last semicolon does not invalidate a DKIM signature in HMS
"DEBUG" 2844 "2021-09-23 14:12:00.071" "DKIM: Message passed validation."
"DEBUG" 2844 "2021-09-23 14:12:00.071" "Spam test: SpamTestDKIM, Score: 0"
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 14:38

@RvdH

semicolon was part of the string indeed but thanks for testing

I further tested on the HMS server and see no difference between the lookup to localhost and e.g. 8.8.8.8 as nameserver. Chunks are the same for both domains.
Still looks like HMS is not interpreting correctly.

Code: Select all

Default Server:  localhost
Address:  127.0.0.1

> set type=txt
> selector1-arnescobv-onmicrosoft-com._domainkey.arnescobv.onmicrosoft.com
Server:  localhost
Address:  127.0.0.1

Non-authoritative answer:
selector1-arnescobv-onmicrosoft-com._domainkey.arnescobv.onmicrosoft.com
text =

        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTHLcKYR
u1KFdDzSmUjyCW0g+5pFFLxJbnXPoFMAPGkfnq/4UVxUYEzO4yQH/L2hWGvDvkUqB+mTPEG+MeJzgGV8
RbyzR5HpCF6AvGY8zG1akkvHg0CgGLDulLl8RFbLVKHv5Lejz7UpORYsPFHUa7K7HU2JRcGzX5KkJL/2
eYSZpUQa5d/yzHPmD06ijuly"
        "jaYVVYfv7LBzBEw8y5BmCwNz4YAiVKaqqsTwNJyXPriNQxY/wizxvNKVC7czxRIzx1I62G2
MC9xWsJWsHGh/xQA9b7fIUa0ItFprC8PpdqGbPWbKeyBGGRXAnkfSb6uVR7ZvMo3ubwcpX1mha7O7QID
AQAB;"
> server 8.8.8.8
Default Server:  dns.google
Address:  8.8.8.8

> selector1-arnescobv-onmicrosoft-com._domainkey.arnescobv.onmicrosoft.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
selector1-arnescobv-onmicrosoft-com._domainkey.arnescobv.onmicrosoft.com
text =

        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTHLcKYR
u1KFdDzSmUjyCW0g+5pFFLxJbnXPoFMAPGkfnq/4UVxUYEzO4yQH/L2hWGvDvkUqB+mTPEG+MeJzgGV8
RbyzR5HpCF6AvGY8zG1akkvHg0CgGLDulLl8RFbLVKHv5Lejz7UpORYsPFHUa7K7HU2JRcGzX5KkJL/2
eYSZpUQa5d/yzHPmD06ijuly"
        "jaYVVYfv7LBzBEw8y5BmCwNz4YAiVKaqqsTwNJyXPriNQxY/wizxvNKVC7czxRIzx1I62G2
MC9xWsJWsHGh/xQA9b7fIUa0ItFprC8PpdqGbPWbKeyBGGRXAnkfSb6uVR7ZvMo3ubwcpX1mha7O7QID
AQAB;"
> ex._domainkey.mydoimain
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
ex._domainkey.mydomain     text =

        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBeNUWoZQ
jW2AfJ/FHCaA/Fb6s/EjiHHgeGwNK2GMVziYDTzavJQQ49Pq2ghjuOnoIMME/gYZXy6Q2iXByrigyO"
        "N7F+hpKcY+61B7F9Mk/1VwuttBlhojqIT6lF+PW5iprtBLRlmyFl1f5x5Xxe549iDbIux6G
VS7VxPyB5vx24ioBHqz4SUj2/qsoaePVFYREFSSpruObYyRocdCmefYHMuDLIgJBmsUJIbgKWYAaSli"

        "o1Cwi6juTK/K/iAqwFxfb/CU0o6Ta6ixsUYb84yd/K5MZaEpf0fbPszGUTlR8NTNajst+Yz
QBckxOjxACfno9I/rx6djjsSdzIJ/xMNGwIDAQAB"
> server 127.0.0.1
Default Server:  [127.0.0.1]
Address:  127.0.0.1

> ex._domainkey.mydomain
Server:  [127.0.0.1]
Address:  127.0.0.1

Non-authoritative answer:
ex._domainkey.mydomain    text =

        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBeNUWoZQ
jW2AfJ/FHCaA/Fb6s/EjiHHgeGwNK2GMVziYDTzavJQQ49Pq2ghjuOnoIMME/gYZXy6Q2iXByrigyO"
        "N7F+hpKcY+61B7F9Mk/1VwuttBlhojqIT6lF+PW5iprtBLRlmyFl1f5x5Xxe549iDbIux6G
VS7VxPyB5vx24ioBHqz4SUj2/qsoaePVFYREFSSpruObYyRocdCmefYHMuDLIgJBmsUJIbgKWYAaSli"

        "o1Cwi6juTK/K/iAqwFxfb/CU0o6Ta6ixsUYb84yd/K5MZaEpf0fbPszGUTlR8NTNajst+Yz
QBckxOjxACfno9I/rx6djjsSdzIJ/xMNGwIDAQAB"
>
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 14:44

I ran a test, but it seems i not have been thinking clear as I send a mail from my private domain to corporate domain using a 2048 bit DKIM key signed message all went fine DKIM signature is validated correctly....until i realized corporate server is running 5.6.8 :P :oops:

That only proves 5.6.8 handles 2048 bit DKIM key signed messages but says totally nothing about 5.7.x
Doubt the DKIM signing and verification code differs (much) between the both versions though
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 14:54

I did another test, this time visa versa, there is absolutely no problem with HMS 5.7.x and 2048 bit DKIM key signed messages

So you have to find the reason in your DNS, or perhaps the message (headers) is/are simply manipulated after outlook servers signed the message and that causes the verification issue
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 15:48

I know for sure that isn't the case. I'm receiving DMARC reports from dmarcreport@microsoft.com with exactly the same error on HMS:

Code: Select all

"SMTPD"	3328	668	"2021-09-23 06:03:14.282"	"40.107.236.64"	"RECEIVED: MAIL FROM:<dmarcreport@microsoft.com> SIZE=20128"
"SMTPD"	3328	668	"2021-09-23 06:03:14.516"	"40.107.236.64"	"SENT: 250 OK"
"SMTPD"	2444	668	"2021-09-23 06:03:14.641"	"40.107.236.64"	"RECEIVED: RCPT TO:<dmarc.info@mydomain>"
"SMTPD"	2444	668	"2021-09-23 06:03:14.641"	"40.107.236.64"	"SENT: 250 OK"
"SMTPD"	3328	668	"2021-09-23 06:03:14.766"	"40.107.236.64"	"RECEIVED: DATA"
"SMTPD"	3328	668	"2021-09-23 06:03:14.766"	"40.107.236.64"	"SENT: 354 OK, send."
"DEBUG"	356	"2021-09-23 06:03:14.937"	"Adding task AsynchronousTask to work queue Asynchronous task queue"
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"Executing task AsynchronousTask in work queue Asynchronous task queue"
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"SURBL: Execute"
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"SURBL: Found URL: microsoft.com"
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"SURBL: 1 unique addresses found."
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"SURBL: Lookup: microsoft.com.multi.surbl.org"
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"SURBL: Match not found"
"DEBUG"	2264	"2021-09-23 06:03:14.953"	"Spam test: SpamTestSURBL, Score: 0"
"TCPIP"	2264	"2021-09-23 06:03:14.969"	"DNS - Query failure. Query: selector1._domainkey.outbound.protection.outlook.com, Type: 16, DnsQuery return value: 9002."
"DEBUG"	2264	"2021-09-23 06:03:15.000"	"DKIM: Error when retrieving public key. Failed to do DNS/TXT lookup."
"DEBUG"	2264	"2021-09-23 06:03:15.000"	"DKIM: Retrieval of public key failed."
So the only way I know to reproduce and troubleshoot on your 5.7 HMS is to create a DMARC record pointing to an emailaddress on your server
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-23 16:33

I run 5.6.8 and it seems to function as expected ... HOWEVER ... to satisfy my curiosity I added this code to my EventHandlers.vbs (OnAcceptMessage())

Code: Select all

Function LookupDKIM(oMessage)
    Dim i, oMatch, oMatchCollection, strRegEx, strSelector, strDomain, strLookup
    If oMessage.HeaderValue("DKIM-Signature") <> "" Then
        EventLog.Write( "DKIM-Signature: " & oMessage.HeaderValue("DKIM-Signature") )
        strRegEx = "(?:(d=\S+)(?:;)|(s=\S+)(?:;))"
        Set oMatchCollection = oLookup(strRegEx, oMessage.HeaderValue("DKIM-Signature"), True)
        For Each oMatch In oMatchCollection
            For i = 0 To oMatch.SubMatches.Count-1
                Select Case Left(oMatch.SubMatches(i), 1)
                  Case "s"
                    strSelector = Mid(oMatch.SubMatches(i), 3)
                  Case "d"
                    strDomain   = Mid(oMatch.SubMatches(i), 3)
                End Select
            Next
        Next
        EventLog.Write( "Lookup: " & strSelector & "._domainkey." & strDomain )
        With CreateObject("DNSLibrary.DNSResolver")
            strLookup = .TXT(strSelector & "._domainkey." & strDomain)
            If Len(strLookup) = 0 Then
                strLookup = .CNAME(strSelector & "._domainkey." & strDomain)
                If Len(strLookup) > 0 Then 
                    EventLog.Write( "CNAME: " & strLookup )
                    strLookup = .TXT(strLookup)
                End If
            End If
            EventLog.Write( strLookup )
        End With
        EventLog.Write( "" )
    End If
End Function
Small sample of the output...

Code: Select all

4508	"2021-09-23 14:41:20.289"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; h=from:subject:mime-version:content-type:content-transfer-encoding: x-feedback-id:to; s=smtpapi; bh=cVObFh0eYVwpSveqT7NXz/NxgvCrRmt2hFFmUr5ssb8=; b=FHrwySDbeeZ2IP8dV59+TfqpVI0QuX4Wfy/ucL/dOpJfZq45dyzVj9ntg19n9r0Tr2a9 afZstVWdBKnU+2Dgm78Y+C/UpjH+yyKVP564rNAWGiRuFZh3mDMJIDA32nO2ou4xu/ir4g NjzFHrUUjhXxSTRn3RnH0YKSGe8fIJLJk="
4508	"2021-09-23 14:41:20.305"	"Lookup: smtpapi._domainkey.github.com"
4508	"2021-09-23 14:41:20.305"	"k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB"
4508	"2021-09-23 14:41:20.305"	""
3528	"2021-09-23 14:48:24.954"	"DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smtpcorp.com; s=a1-4; h=Feedback-ID:X-Smtpcorp-Track:Message-Id:Subject: Date:To:From:Reply-To:Sender:List-Unsubscribe; bh=ArZGR7zmjNi4TRj/X1Z++HGJHqAr2ciXkZ/FBae/1wo=; b=GzKyebwRn5k5F+d0HTeQl+Bmp5 kg6lvphJrAPg65vjhx0D/zwt1+AMQmrSPEDglV9zY5sPKzOP7uEpMQ/Kr4JQGBMRgyxhB1VqmzduZ GikoVdKCSOg+uta/zp8AcJoC0cSTdgusnw/YErmkqcUHO+1IwqV1B4QCXrirdU6hMT/cpT7ETQwIx JG3txnekx4UGr/7g2CvH2UMjLvdAaKF/Z+Krcyy+5MjKRJh1NQt/2IL2+E1TKyemRETc7HAC8zkSm 6zPwa2I/c5kdZ8bYnqC5Wx+vFAaSoSn866Lrc6F1vqzY9XlWsmTas41f/QDY/GB0C8zwGbWYs389G NbNar4wQ==;"
3528	"2021-09-23 14:48:24.954"	"Lookup: a1-4._domainkey.smtpcorp.com"
3528	"2021-09-23 14:48:24.954"	"k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N4BQsxd37jeCKSqrO9nkpxDb0S0bOc7KCR9V0umud0M1yhANQY3SlHNB5DVdecmj7Bf6P5bNBRZ3IAYw4XMbDmdr75Xb12ixULvvpMHGkdr4DkcIdWNwN/XzHtc52y42u/4gx83l8MrNnEtLVg2rKE[nl]EeDZIsFSa90ajVcbXu923GSO2Fg8t8TeAN6EzqEBtoErVtA4tbKUCPIf2KHBK0zE9DJHSbmPayLHfzleV0k/otJH3Kf10oXpjQPa3FIDHspubQDMwdPmzGL1sAzBBBf8NWfydMMDfwjDv3fqjFviugOnqJsaeeoIntzkLiSfQlDz3H0gylnpy8a6d9arn4wIDAQAB"
3528	"2021-09-23 14:48:24.954"	""
3528	"2021-09-23 15:14:27.356"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sallinggroup.com; h=from:subject:mime-version:to:content-type; s=s1; bh=nAZwtTrFYkwrg8fHaF5q9cMFRu+l7jZnJRFHCW0loJY=; b=sBF86HVh+ct1SBcd/cf2slrcjNOo+s7Gaj7JfVX2P81whNJ3DS3S5+nwJb32z4FqTteA MiRxPmLNghWkB248WjkGCRmZLdsKT2ky6nvCzeg3dPBzmSNIRR318HSD2fkuuqwAIBHBxZ TCHPA4nyeFFE8rib4zLLf00Xqit/AoOUoXRcYkweTjkWrajoRAFx44sOLItBLKNxU0rluT xn738r9pJMpgGQWfvQsqfQoRI4M9miAbKbbSn162dN76e354BItSm/tDfEd/IYog/Rpm6g MjhGg8rx5XfNoyhAYKQ4G9ekQyw3rvFLhtP0V1WphGwjWXF6o9Lj8FhfVrFw6kHw=="
3528	"2021-09-23 15:14:27.372"	"Lookup: s1._domainkey.sallinggroup.com"
3528	"2021-09-23 15:14:27.372"	"CNAME: s1.domainkey.u1402401.wl152.sendgrid.net"
3528	"2021-09-23 15:14:27.372"	"k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+6XCQ0viFb8nbQ5ppOL1psKYUp+lj3q/IT5dGnry1vc4p0HuAjXyek2hBYot58eLBmLvgNVEn7ZA50kMvtcmEVtUaNmrC8FOt7tNQ0OyOvHiKuYhc2srZ5kxZuP4Knz7xkQbGgrW56Vb7s4tcGMY11vTtUo2cPhmG8J7UDMNrW81QqdU1THijkIoCIwIAhlhZ5S[nl]McRdG5brsy8P2htZGOwNDcs/SUtPxiNz3HIR+eGm6oFgivWDgbXjwgvHDI85dIFzhw7G2LW9HghTZYDfZMUMPP1UdOfFOv40VDm77wIMjonpk6qy4OvycxfctZHILN7UGhRFOlmqdegZijALQIDAQAB"
3528	"2021-09-23 15:14:27.372"	""
1732	"2021-09-23 15:15:15.465"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sallinggroup.com; h=from:subject:mime-version:to:content-type; s=s1; bh=qUNXHREwAW3pjr6yPJ5ehgl/5BxCpUZgweqfWla7Lmc=; b=h4b9jCiqH163SpD81lAWZ99UoYR5ysoGAfpxwY+TjlGNC9MVr2lmUAsLtdhWFtTs+/gA tLRuBFpjTNcvyQog8RMAXJVTUj/AjV5prY3gwSuJAuZKR8xjt8vmfqYRRPe88qQ47E2Xo7 Rj+F3Ky9E7O/JUfG7eyNA2/OjuSocMc+ffD4RWOXnjfMyBRBc3tCsG/oNARtyjQ/LITnLJ rXaAkfedCfArtK4zbAiKTWWgQ/caFTeYpqJmv3j57yQrp+yRcPVTkh+YlYqbVsA9dblsA3 q2WB48YUqzxJWobMTOcjFKxDMgwMXPOZgYdq9a1iP0GTM1uagP+bMlfeNaQIIr/Q=="
1732	"2021-09-23 15:15:15.481"	"Lookup: s1._domainkey.sallinggroup.com"
1732	"2021-09-23 15:15:15.496"	"CNAME: s1.domainkey.u1402401.wl152.sendgrid.net"
1732	"2021-09-23 15:15:15.496"	"k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+6XCQ0viFb8nbQ5ppOL1psKYUp+lj3q/IT5dGnry1vc4p0HuAjXyek2hBYot58eLBmLvgNVEn7ZA50kMvtcmEVtUaNmrC8FOt7tNQ0OyOvHiKuYhc2srZ5kxZuP4Knz7xkQbGgrW56Vb7s4tcGMY11vTtUo2cPhmG8J7UDMNrW81QqdU1THijkIoCIwIAhlhZ5S[nl]McRdG5brsy8P2htZGOwNDcs/SUtPxiNz3HIR+eGm6oFgivWDgbXjwgvHDI85dIFzhw7G2LW9HghTZYDfZMUMPP1UdOfFOv40VDm77wIMjonpk6qy4OvycxfctZHILN7UGhRFOlmqdegZijALQIDAQAB"
1732	"2021-09-23 15:15:15.496"	""
1732	"2021-09-23 15:32:54.804"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=50dkim1; d=dialogue.santanderconsumer.dk; h=From:To:Subject:Date:List-Unsubscribe:List-Unsubscribe-Post:MIME-Version: Reply-To:List-ID:X-CSA-Complaints:Message-ID:Content-Type; i=dialogue@dialogue.santanderconsumer.dk; bh=7Qqu3RhqEjJFfg91N+R9DxMZiS4kWhlgAgMmQ0FKSe0=; b=S4aYs9TMvMaQOyFaHjrUjzq/Hm+8mPLDsd/vJxSRVkY6/Rk3hcmL4DKAj/a4zZi/Z9OXLFWV61Ut 8IMdtelvACtnu380UW5RtLZterwHnyOA5BQKwLhNpGGLFKE2gutHIfVj+/aKP73crS/fRk4u5Ecz Jv+Y2wdcNYBjerhT+QaR0SeP9DW7RP/hqJWXv4raIZvYU4CFlE0OgxqGWMLBrnPaTVYMuuYObrJY AIAdy/jUQ6rLuxIhelV7ZlZrJXn2h/r2eMlw4CJC3wQmGSe2bGb+hYbJJlpsWdoInwS0Qsf7Z25R jrVugpXFWlnTbrPwrE13EI6yghOQT5eIpUeEiw=="
1732	"2021-09-23 15:32:54.804"	"Lookup: 50dkim1._domainkey.dialogue.santanderconsumer.dk"
1732	"2021-09-23 15:32:54.820"	"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+pwSE2FxqncAgzL[nl]3gtcL1clvZa70025dbH66oD4/B7/MEYkuwEUE9vhhU5sJ6oNVby//Nu7U3uC[nl]lgSVrzibGUprJw8VRXs4BVFqc6mwlxUf1MK/hRdRtNGFcLWd0PXRg/gyE53R[nl]YYjacIfNVOd9DB5iZ8LeWu3q84Yh47sjNpwmJ0yDKmqUpW0ZJL8OuLPHEwbt[nl]qEktTMCwt7zp4X+/mR5kpAyFo/mjVlOTBT4LD3eCG5LWBYa6FxXoB0xXH1Vd[nl]YUp0Nd5QX0fiM5CnNjAEiiXkxVJRISfCpUL3UOtPEzgfLkW3g8FaHE1n37vp[nl]HL0N/e+7Hq6bMM6rZ0SExvWUcwIDAQAB"
1732	"2021-09-23 15:32:54.820"	""
4996	"2021-09-23 15:47:23.006"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=saphe.com; h=content-type:from:mime-version:subject:to; s=s1; bh=Qknhe6dkQLrKB0d3qN+swLrLTU4rlwOohqA+I12WEVI=; b=tuIqOL3LPwZ4yS4aJZ18oQNlG5E7C0Q56omRAWdOdXwXZUCuvgwTRKuM557w0VIoWe0h Rm+O0lqLt09bHaq0kvcfXfiACPTtHxoJjUUH9/QdBcsKwQJ7EFGx6UhiM7XV/C+Y27G8Km 5jGHpitHDVVnRvyDvcZo/chBIeZlqamkOswC2f2fjSNoNvAWq+Xd2kfmUJRUO9M8LXRb6V 4/vn1DTm3UVX7WBsTINkHip40Wsjt2Uat11Ezx2iLuOlW+aCIxCJIz4h+3UHtyAXue901j 4OeQxZHzONiR/+m+e/ZQXIvDKulrF45IVB3j9nJqLrsUBFDEKPU6mfmDj0so3nwg=="
4996	"2021-09-23 15:47:23.006"	"Lookup: s1._domainkey.saphe.com"
4996	"2021-09-23 15:47:23.022"	"CNAME: s1.domainkey.u3397314.wl065.sendgrid.net"
4996	"2021-09-23 15:47:23.022"	"k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s/bHfZ3IWjXWfmYbZ2HpUPlWBj3zMc645MYWs9g4tqKHnSf3xkv/RhkkeZ8aD9GDw3iol6hPQ/9lj8z6ZtGPi65NSpoWVx0UiDWmQTArlqFiY4xer99RBt8GkRKYXjpSGh3c6r4OHHQ9wXipWZlBYlWJFZbM3yrxTWG+1tBKKYVRFBORV9sS4tHgFbeGA9So5skY[nl]lWa8WgHjuxtibq/8y/IVjigF2DIE/IR+/hnJrP0bgb3hPPHrbXD+/AeRZuyMqlEhBoKxlm/E8H6gWwJDtWflMsh4Xp13hf+Gs5WdV2RX4xGrKZ20CzUx6UUL07LOf2aAjD9uoz5AaMkyr+8pwIDAQAB"
4996	"2021-09-23 15:47:23.022"	""
4996	"2021-09-23 15:59:02.618"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=saphe.dk; h=content-type:from:mime-version:subject:list-unsubscribe:to; s=kl; bh=CON1hJLhDGFvMydteJZv9Vc4RZ7j1SfhwGkGDq+4mXs=; b=tc7HdnH7LSKrZ4sY42WUzYyNWu0ktvqNacEXdx3MBLbUOUQIvIx0c+YeyKxmKdawaiQV 8yECdUr1Lr4MTZmwRH6ksp4+wMetKys2W+UrPGy+42TE+ivgAtMPvjUEuVY5SRYEKwwXvN EecgNnQeZTcyznlVnPntwxiiOLSQbQpvLL+jOdVWZJ7KNMxAa351lKXgyrvO6+cZVdR1iV KkBGPWfZ5sSBtXKGGC/oioFGCInnezDqILG9gV8zw4/nm0sxRlzbMrPEBvyrXIpDIB8U7P sl08swmuAdXhuDoWk28N2NCAh0uPgYc+1LRdatjRdcxgzezXRojoDpp8uwMROA1g=="
4996	"2021-09-23 15:59:02.633"	"Lookup: kl._domainkey.saphe.dk"
4996	"2021-09-23 15:59:02.633"	"CNAME: kl.domainkey.u161779.wl030.sendgrid.net"
4996	"2021-09-23 15:59:02.633"	"k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA057nYBclByWEdflBGMqQTZ9EsWNEllR+scLimekAqnvGzM2QbtWUYPwsXWq0q1rf8gDfve4lG4jpb1tWe66xDCmaDelHNVCUBzDak0ViBY10QoNytkgJVlg1mRlmvhHPeut78qbVe8P2DIGSXg/2UpmSLe2u1lWaAp70DfLw45rfTWOAkBEZ/wfzinsz3mQu2aavk[nl]BkUERryVogDVBxC83IaLFY2mrvoffaGQVXQMa1+AGIAAhqOC+BE6NGuAmWXQNTzEYJhewD056bPcL3LVeqn4xQIiBfOw6yh0MEtKlfgF/nognp1t7gltGmtJnkXeYrc6In3RrjOdnU28Xk+cwIDAQAB"
4996	"2021-09-23 15:59:02.633"	""
What I have observed so far:

1024 bit key: p ~ 220 char
2048 bit key: p ~ 396 char
4096 bit key: p ~ 740 char

Line breaks are enclosed in the returning string as "[nl]". Apple.com cut their 4096 bit key into 128 char segments :roll: most other returned strings (2048 bit) are cut close to 255 char.
Last edited by SorenR on 2021-09-23 17:01, edited 1 time in total.
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 16:36

Code: Select all

"TCPIP"	2264	"2021-09-23 06:03:14.969"	"DNS - Query failure. Query: selector1._domainkey.outbound.protection.outlook.com, Type: 16, DnsQuery return value: 9002."
"DEBUG"	2264	"2021-09-23 06:03:15.000"	"DKIM: Error when retrieving public key. Failed to do DNS/TXT lookup."
"DEBUG"	2264	"2021-09-23 06:03:15.000"	"DKIM: Retrieval of public key failed."
Notes that might be of interest. :?:
https://mxtoolbox.com/SuperTool.aspx?ac ... n=toolpage

dig selector1._domainkey.outbound.protection.outlook.com TXT

Code: Select all

; <<>> DiG 9.11.29 <<>> selector1._domainkey.outbound.protection.outlook.com TXT

;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7981
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: fdd7e6243e78aa5e18692be4614c91bfd8da32b43d1cc1bc (good)
;; QUESTION SECTION:
;selector1._domainkey.outbound.protection.outlook.com. IN TXT

;; ANSWER SECTION:
selector1._domainkey.outbound.protection.outlook.com. 600 IN TXT "v=DKIM1;k=rsa;
p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgV
w8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58
+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5" "
N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLI
g6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=
2048,1452627113,1468351913"

;; Query time: 31 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Sep 23 16:39:59 W. Europe Daylight Time 2021
;; MSG SIZE  rcvd: 560

nslookup -type=txt selector1._domainkey.outbound.protection.outlook.com

Code: Select all

Server: localhost
Address: 127.0.0.1

Non-authoritative answer:
selector1._domainkey.outbound.protection.outlook.com    text =

        "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO
/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7
lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmO
iKTsOP6A7vQxfSya9jg5"
        "N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9
sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQ
IDAQAB;n=2048,1452627113,1468351913"
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 17:00

SorenR wrote:
2021-09-23 16:33
I run 5.6.8 and it seems to function as expected ... HOWEVER ... to satisfy my curiosity I added this code to my EventHandlers.vbs (OnAcceptMessage())
What do you make of this? (running HMS 5.6.x)

Code: Select all

3920	"2021-09-23 16:53:04.432"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LEzIQ/v5SVs3kU6agCpfaJse+2M+yvjiwOSwsb9SsOg=; b=MRFf7NVvDlkjbTMRY/pS1/3FewDCDDb+l65uPLEzuzh1KopJ9CEWrkZglV+RezVTMG1EpnUoc7IWtv1oX18OrqAfwgxKqfHnYLfH5PjZLSZO6uQoTHCtb2UV9GzxrqnNiDuWovQDStmHT230BhihES0hMWqZbaqs7FGgcbwS/N9yhmo1DD8azGzmydN9hCrROmf2KZAhaHxYPi4GOerBVW5YvXzXeSfK0nhVEOP92Cjp8bG+cW9n10qpsZnq9FlEI/iQ5pjeKH3mGcmlF2NA+eFDmAongEBSx6p4fZoPY2XM45QN/q5FpSc5gOtSr85P+/L8TLaIgGjCd5KGIs9Otw=="
3920	"2021-09-23 16:53:04.432"	"Lookup: selector1._domainkey.hotmail.com"
3920	"2021-09-23 16:53:04.479"	"CNAME: selector1._domainkey.outbound.protection.outlook.com"
3920	"2021-09-23 16:53:04.494"	""
3920	"2021-09-23 16:53:04.494"	""
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-23 17:08

Code: Select all

C:\WINDOWS\system32>nslookup
Default Server:  mail.acme.inc
Address:  192.168.0.6

> set type=ALL
> selector1._domainkey.hotmail.com
Server:  mail.acme.inc
Address:  192.168.0.6

Non-authoritative answer:
selector1._domainkey.hotmail.com        canonical name = selector1._domainkey.outbound.protection.outlook.com
> selector1._domainkey.outbound.protection.outlook.com
Server:  mail.acme.inc
Address:  192.168.0.6

Non-authoritative answer:
selector1._domainkey.outbound.protection.outlook.com    text =

        "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5"
        "N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913"
>
DNS cache issue?
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 17:15

both the nslookup and dig commands above were done on the same server, so if cached it would be cached properly :!: :?:

CYM (spam@..) send you a mail from my hotmail account, verify if you get the same
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-23 17:20

RvdH wrote:
2021-09-23 17:15
both the nslookup and dig commands above were done on the same server :!: :?:

CYM (spam@..) send you a mail from my hotmail account, verify if you get the same
Hmm ... Not resolving here either :roll:
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-23 17:30

Seems to pass DKIM check in both hMailServer and SpamAssassin ... :!: :?:

Code: Select all

X-Spam-Report: *  3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100% 
               *      [score: 0.9938]
               * -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, 
               *      no trust 
               *      [40.92.17.55 listed in list.dnswl.org] 
               * -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) 
               *      [40.92.17.55 listed in wl.mailspike.net] 
               *  1.5 SUBJ_ALL_CAPS Subject is all capitals 
               * -0.0 SPF_PASS SPF: sender matches SPF record 
               * -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 
               *  0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail 
               *      provider (ruud.vd.hout[at]hotmail.com) 
               *  0.0 HTML_MESSAGE BODY: HTML included in message 
               *  0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 
               * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from 
               *      author's domain 
               * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 
               * -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from 
               *      envelope-from domain 
               *  0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily 
               *      valid
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 17:35

SorenR wrote:
2021-09-23 17:20
RvdH wrote:
2021-09-23 17:15
both the nslookup and dig commands above were done on the same server :!: :?:

CYM (spam@..) send you a mail from my hotmail account, verify if you get the same
Hmm ... Not resolving here either :roll:
Funny thing when i send from my hotmail account is that it passes HMS DKIM check just fine, so i don't get a DKIM error but DNSLibrary.DNSResolver doesn't return the proper value (note sure how good, if at all DNSLibrary.DNSResolver handles recursion)

Code: Select all

"DEBUG"	3920	"2021-09-23 17:31:08.008"	"DKIM: Message passed validation."
"DEBUG"	3920	"2021-09-23 17:31:08.008"	"Spam test: SpamTestDKIM, Score: 0"

Code: Select all

3920	"2021-09-23 17:31:16.698"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aodv8xkF0N3RZwnmdyr7e/mgeqbXA5JlC4x7Xrb2+oY=; b=UHJu6unmOAmCcu1LXD1wsLdmVkEs6GDnPI6Z6jtnGsGF+uTJl+wLLUwrC0qG4UKsTxfRXCe+b/t0ZeMoUapN0nWaaMIm5m4eqz5kmYShW/HXRJ58g3j1nPIL5c85Xnaghlj3WCjXn3ltKjRo3GCmR7va1g0L41SGebQpcHAKaMEtNfJcmK3C/xI5E/qaz9RXahpCQ0pIs6+2q7RRceV9OEOiXAI9VIstks4+PZzDuBjJ6xUJud9eF6+EQpjUqS+m1oYSpPEP7m3nVRZnRhou15jJwABdMUV5nuPX7mw/kH9bJ318i/walxkoL4S3TBDJGuLYl+eUwB1t/hWcpb5daQ=="
3920	"2021-09-23 17:31:16.698"	"Lookup: selector1._domainkey.hotmail.com"
3920	"2021-09-23 17:31:16.776"	"CNAME: selector1._domainkey.outbound.protection.outlook.com"
3920	"2021-09-23 17:31:16.792"	""
3920	"2021-09-23 17:31:16.792"	""
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-23 17:53

RvdH wrote:
2021-09-23 17:35

Funny thing when i send from my hotmail account is that it passes HMS DKIM check just fine, so i don't get a DKIM error but DNSLibrary.DNSResolver doesn't return the proper value (note sure how good, if at all DNSLibrary.DNSResolver handles recursion)

Code: Select all

"DEBUG"	3920	"2021-09-23 17:31:08.008"	"DKIM: Message passed validation."
"DEBUG"	3920	"2021-09-23 17:31:08.008"	"Spam test: SpamTestDKIM, Score: 0"

Code: Select all

3920	"2021-09-23 17:31:16.698"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aodv8xkF0N3RZwnmdyr7e/mgeqbXA5JlC4x7Xrb2+oY=; b=UHJu6unmOAmCcu1LXD1wsLdmVkEs6GDnPI6Z6jtnGsGF+uTJl+wLLUwrC0qG4UKsTxfRXCe+b/t0ZeMoUapN0nWaaMIm5m4eqz5kmYShW/HXRJ58g3j1nPIL5c85Xnaghlj3WCjXn3ltKjRo3GCmR7va1g0L41SGebQpcHAKaMEtNfJcmK3C/xI5E/qaz9RXahpCQ0pIs6+2q7RRceV9OEOiXAI9VIstks4+PZzDuBjJ6xUJud9eF6+EQpjUqS+m1oYSpPEP7m3nVRZnRhou15jJwABdMUV5nuPX7mw/kH9bJ318i/walxkoL4S3TBDJGuLYl+eUwB1t/hWcpb5daQ=="
3920	"2021-09-23 17:31:16.698"	"Lookup: selector1._domainkey.hotmail.com"
3920	"2021-09-23 17:31:16.776"	"CNAME: selector1._domainkey.outbound.protection.outlook.com"
3920	"2021-09-23 17:31:16.792"	""
3920	"2021-09-23 17:31:16.792"	""
OR :!: DKIM is fooked in hMailServer :wink:

What does your SpamAssassin have to say?
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 18:03

Both HMS and SA say it is properly signed

Mmmm, mxtoolbox can't resolve the CNAME either. So maybe there simply isn't a CNAME
https://mxtoolbox.com/SuperTool.aspx?ac ... tworktools

I think this simply is a quirk in DNSLibrary.DNSResolver, i think it should resolve the DKIM TXT record as apparently the CNAME does not exist
Last edited by RvdH on 2021-09-23 18:13, edited 5 times in total.
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-23 18:10

This one failed DKIM test today. DNS record do not exist.

Code: Select all

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=edm.ihoverboard.co.uk; s=intl; q=dns/txt;
 h=From:Subject:Date:To; bh=itEM5Uq16Pahe3Poc4b7mkJ/yKQ=; b=DaDS4XC26+Wyd/ggc1Gzk7e0SXSZxGQxspidDOCf9riRXPypNG2Wg6wUTRb4+oGXsFz8T9
 BH+T/BG8eIuWD0pq7J1Pd3F1akpvANXYjTgOJwFMYhMXu93D8eaDk6sDhEzwy5C2k66EyBB
 jO6IYdYCNqipZAYypeMN1dgauTWKVU=;
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-23 18:27

RvdH wrote:
2021-09-23 18:03
Both HMS and SA say it is properly signed

Mmmm, mxtoolbox can't resolve the CNAME either. So maybe there simply isn't a CNAME
https://mxtoolbox.com/SuperTool.aspx?ac ... tworktools

I think this simply is a quirk in DNSLibrary.DNSResolver, i think it should resolve the DKIM TXT record as apparently the CNAME does not exist
That's because there is no CNAME. If you lookup CNAME for selector1._domainkey.hotmail.com it gives you the correct one: selector1._domainkey.outbound.protection.outlook.com
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-23 18:52

berg128 wrote:
2021-09-23 18:27
RvdH wrote:
2021-09-23 18:03
Both HMS and SA say it is properly signed

Mmmm, mxtoolbox can't resolve the CNAME either. So maybe there simply isn't a CNAME
https://mxtoolbox.com/SuperTool.aspx?ac ... tworktools

I think this simply is a quirk in DNSLibrary.DNSResolver, :arrow: i think it should resolve the DKIM TXT record as apparently the CNAME does not exist
That's because there is no CNAME. If you lookup CNAME for selector1._domainkey.hotmail.com it gives you the correct one: selector1._domainkey.outbound.protection.outlook.com
Yup, another oops moment my side :oops:
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-24 12:07

I think i found the issue concerning DNSLibrary.DNSResolver

It looks like the DNSLibrary.DNSResolver has issues using UDP request with such a long response, eg: > 512 bytes
Once i switch it to use TCP request the DNSLibrary.DNSResolver resolves the TXT record for selector1._domainkey.outbound.protection.outlook.com without issues

Now i could make TCP mode in DNSLibrary.DNSResolver default (whereas UDP is the default now) or make it configurable....maybe ;)


@berg128
I think this indirectly might be part of the cause you have, maybe a firewall, router, modem that block large UDP packets?
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-24 13:43

https://blog.rmilne.ca/2020/04/20/how-t ... o-use-tcp/

https://docs.microsoft.com/en-us/window ... kup-set-vc

I wonder it you can force use of TCP in DNS lookups for hMailServer by issuing "set vc" before starting hMailServer ??

Is OP using a MS DNS server or a BIND derivative?
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-24 13:49

SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-24 13:55

SorenR wrote:
2021-09-24 13:43
https://blog.rmilne.ca/2020/04/20/how-t ... o-use-tcp/

https://docs.microsoft.com/en-us/window ... kup-set-vc

I wonder it you can force use of TCP in DNS lookups for hMailServer by issuing "set vc" before starting hMailServer ??

Is OP using a MS DNS server or a BIND derivative?
Normally when a UDP DNS lookup fails it will fallback to TCP so i see no use to force HMS to use TCP

The DNSLibrary.DNSResolver component lacks that ability but these are two completely different things and not even closely related (So from now on i will not mention DNSLibrary.DNSResolver here again :mrgreen: )
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-24 15:18

Test if firewall support EDNS0 ...

Code: Select all

nslookup -type=TXT rs.dns-oarc.net. 4.2.2.6

Code: Select all

Non-authoritative answer:
rs.dns-oarc.net canonical name = rst.x4090.rs.dns-oarc.net
rst.x4090.rs.dns-oarc.net       canonical name = rst.x4688.x4090.rs.dns-oarc.net
rst.x4688.x4090.rs.dns-oarc.net canonical name = rst.x4694.x4688.x4090.rs.dns-oarc.net
rst.x4694.x4688.x4090.rs.dns-oarc.net   text =

        "8.0.18.141 DNS reply size limit is at least 4694"
rst.x4694.x4688.x4090.rs.dns-oarc.net   text =

        "8.0.18.141 sent EDNS buffer size 8192"

No EDNS0 ... Yes, I have disabled EDNS in my W2019 DNS.

Code: Select all

nslookup -type=TXT rs.dns-oarc.net.

Code: Select all

Non-authoritative answer:
rs.dns-oarc.net canonical name = rst.x476.rs.dns-oarc.net
rst.x476.rs.dns-oarc.net        canonical name = rst.x485.x476.rs.dns-oarc.net
rst.x485.x476.rs.dns-oarc.net   canonical name = rst.x490.x485.x476.rs.dns-oarc.net
rst.x490.x485.x476.rs.dns-oarc.net      text =

        "87.104.57.5 DNS reply size limit is at least 490"
rst.x490.x485.x476.rs.dns-oarc.net      text =

        "87.104.57.5 lacks EDNS, defaults to 512"
EDNS enabled in DNS ...

Code: Select all

Non-authoritative answer:
rs.dns-oarc.net canonical name = rst.x3964.rs.dns-oarc.net
rst.x3964.rs.dns-oarc.net       canonical name = rst.x3974.x3964.rs.dns-oarc.net
rst.x3974.x3964.rs.dns-oarc.net canonical name = rst.x3980.x3974.x3964.rs.dns-oarc.net
rst.x3980.x3974.x3964.rs.dns-oarc.net   text =

        "87.104.57.5 DNS reply size limit is at least 3980"
rst.x3980.x3974.x3964.rs.dns-oarc.net   text =

        "87.104.57.5 sent EDNS buffer size 4000"
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-24 15:40

I use BIND9 DNS Server as local caching server (& easier to setup conditional forwarders in my opinion, eg: required for some DNSBL to not use public DNS servers)

dig @4.2.2.6 rs.dns-oarc.net. TXT

Code: Select all

; <<>> DiG 9.11.29 <<>> @4.2.2.6 rs.dns-oarc.net. TXT
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58858
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 8192
;; QUESTION SECTION:
;rs.dns-oarc.net.               IN      TXT

;; ANSWER SECTION:
rs.dns-oarc.net.        59      IN      CNAME   rst.x4090.rs.dns-oarc.net.
rst.x4090.rs.dns-oarc.net. 58   IN      CNAME   rst.x4688.x4090.rs.dns-oarc.net.
rst.x4688.x4090.rs.dns-oarc.net. 58 IN  CNAME   rst.x4694.x4688.x4090.rs.dns-oarc.net.
rst.x4694.x4688.x4090.rs.dns-oarc.net. 57 IN TXT "8.0.18.133 DNS reply size limit is at least 4694"
rst.x4694.x4688.x4090.rs.dns-oarc.net. 57 IN TXT "8.0.18.133 sent EDNS buffer size 8192"

;; Query time: 1437 msec
;; SERVER: 4.2.2.6#53(4.2.2.6)
;; WHEN: Fri Sep 24 15:30:56 W. Europe Daylight Time 2021
;; MSG SIZE  rcvd: 227

[Off Topic]
Does the name i am not going to mention work with EDNS0? :lol:
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-24 16:06

RvdH wrote:
2021-09-24 15:40
[Off Topic]
Does the name i am not going to mention work with EDNS0? :lol:
No idea, have not tried it yet - about to go shopping for food ... and a few vegetables :mrgreen:

We should name it Voldemort :wink:
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-24 17:56

One (remarkable) thing i notice on the DKIM format it it contains no spaces between different elements

Code: Select all

v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913
Even Voldemort seems to have no issues with other 2048 bit keys (UDP and TCP), it seems the only one which is failing is selector1._domainkey.outbound.protection.outlook.com on UDP :evil:
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

berg128
Normal user
Normal user
Posts: 36
Joined: 2021-01-07 08:41

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by berg128 » 2021-09-24 22:54

RvdH wrote:
2021-09-24 12:07
@berg128
I think this indirectly might be part of the cause you have, maybe a firewall, router, modem that block large UDP packets?
SorenR wrote:
2021-09-24 13:43
Is OP using a MS DNS server or a BIND derivative?
My firewall only allows a number of specific TCP port numbers and I am using MS DNS

The test lookups you mention are not quite clear to me...which text record do you lookup exactly?
Mail Experience: Mdaemon 23 yrs Exchange 22 yrs HMS 0,16 yrs :)

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-25 00:54

berg128 wrote:
2021-09-24 22:54
RvdH wrote:
2021-09-24 12:07
@berg128
I think this indirectly might be part of the cause you have, maybe a firewall, router, modem that block large UDP packets?
SorenR wrote:
2021-09-24 13:43
Is OP using a MS DNS server or a BIND derivative?
My firewall only allows a number of specific TCP port numbers and I am using MS DNS

The test lookups you mention are not quite clear to me...which text record do you lookup exactly?

Code: Select all

rs.dns-oarc.net.
I presume it a custom record with some embedded code on the server side.

Test if Firewall allow > 512 byte UDP. This is between you (Windows DNS Client) and the DNS server on ip address 4.2.2.6

Code: Select all

nslookup -type=TXT rs.dns-oarc.net. 4.2.2.6
Test if your DNS server support EDNS. This is between you (Windows DNS Client) - your assigned DNS server/forwarder and the DNS server responsible for rs.dns-oarc.net

Code: Select all

nslookup -type=TXT rs.dns-oarc.net. 4.2.2.6
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
SorenR
Senior user
Senior user
Posts: 4910
Joined: 2006-08-21 15:38
Location: Denmark

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by SorenR » 2021-09-25 01:16

RvdH wrote:
2021-09-24 17:56
One (remarkable) thing i notice on the DKIM format it it contains no spaces between different elements

Code: Select all

v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913
Even Voldemort seems to have no issues with other 2048 bit keys (UDP and TCP), it seems the only one which is failing is selector1._domainkey.outbound.protection.outlook.com on UDP :evil:
I have 9:1 with spaces between tags.

Code: Select all

?2028	"2021-09-24 20:43:08.967"	"Lookup: d2048-201806-01._domainkey.linkedin.com"
?2028	"2021-09-24 20:43:08.983"	"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nMrv5DZHDZA55yorX3gRKAhcTQRV0g2mW9V/UUg4YjV4CnPOtzbYb9yRb+fkkev1QTJDv49/d9IBbCvYcMhGPaH+YUoAKUopQ0mex3MhysSsZs7h6CbBSLJTOS0MskQ13tdmenIjrbHXQo2VviL0B2ZMYLesZulw8iq+QQ31aaEvKhwiioQd1mI+9IAea3jY[nl]WTTOpBgohYEvR9Amwnf6zW5ckRlngksN3rndxHPTYztGA9ifkK0o/qtCsN2aumgQWGeWT+Y2Iaoz4VKsFGSeJunIxaNpax1ynygSiI4zYOmIJ6sXGQEXTfBo//IhMuS0jFyOBvSrx8CfyWwUhVMtwIDAQAB"
Look for the "[nl]"... This is actually spliced together from multiple strings.

Keys from Apple.com are even more anal ... Around 178 char string lengths spliced together with "[nl]" between strings.

If the outlook key is truly returned as a EDNS0 string then it is a single unbroken string longer than 512 bytes and that could be why nslookup can deal with it and Voldemort cannot :wink:
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-25 09:57

SorenR wrote:
2021-09-25 01:16
If the outlook key is truly returned as a EDNS0 string then it is a single unbroken string longer than 512 bytes and that could be why nslookup can deal with it and Voldemort cannot :wink:
there is newline in it, for readability i removed that before posting here

Maybe i should rewrite Voldemort someday to use windows own dnsapi, as it is now based on https://www.codeproject.com/Articles/23 ... Resolver-C which may or may not be bug free
d-fault.nl/DNSTools is based on the same... although i noticed i use TCP lookups as default there
Voldemort (TCP) output MsgBox( strLookup ) for selector1._domainkey.outbound.protection.outlook.com

Code: Select all

---------------------------

---------------------------
v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5

N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913
---------------------------
OK   
---------------------------

Both my personal HMS instance (5.7.0) and SA 3.4.4 have no trouble validating it though. That is what makes berg128's problem so weird and i therefor suspect it to be something related to packet size limit on firewall/router/modem/dns level
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1684
Joined: 2008-06-27 14:42
Location: Netherlands

Re: DKIM Error on 5.7.0-B2572 (x64)

Post by RvdH » 2021-09-25 15:55

I switched to using EventLogX class for readability

Code: Select all

Function LookupDKIM(oMessage)
	Dim i, oMatch, oMatchCollection, strRegEx, strSelector, strDomain, strLookup
	If oMessage.HeaderValue("DKIM-Signature") <> "" Then
		Dim EventLogX : Set EventLogX = New LogWriter
		EventLogX.LogFile = "dkim"
		EventLogX.Write("DKIM-Signature: " & oMessage.HeaderValue("DKIM-Signature") )
		strRegEx = "(?:(d=\S+)(?:;)|(s=\S+)(?:;))"
		Set oMatchCollection = oLookup(strRegEx, oMessage.HeaderValue("DKIM-Signature"), True)
		For Each oMatch In oMatchCollection
			For i = 0 To oMatch.SubMatches.Count-1
				Select Case Left(oMatch.SubMatches(i), 1)
				Case "s"
					strSelector = Mid(oMatch.SubMatches(i), 3)
				Case "d"
					strDomain   = Mid(oMatch.SubMatches(i), 3)
				End Select
			Next
		Next
		EventLogX.Write("Lookup record: " & strSelector & "._domainkey." & strDomain )
		With CreateObject("DNSLibrary.DNSResolver")
			strLookup = .TXT(strSelector & "._domainkey." & strDomain)
			If Len(strLookup) = 0 Then
				strLookup = .CNAME(strSelector & "._domainkey." & strDomain)
				If Len(strLookup) > 0 Then 
					EventLogX.Write("CNAME record: " & strLookup )
					strLookup = .TXT(strLookup)
				End If
			End If
			EventLogX.Write("DKIM record: " & Replace( strLookup, VbCrLF, Empty ) )
		End With
		Set EventLogX = Nothing
	End If
End Function
Voldemort (TCP) which handles hotmail/outlook without issues

Code: Select all

87	"2021-09-25 12:21:51.980"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=r.grouponmail.nl; s=s2048d20190430; t=1632565302; bh=ca1yv3pkttEtdpZ99kT3cXw39cfzoGv18JWfF6HWOrQ=; h=Date:From:To:Message-ID:Subject:Content-Type; b=Q5NsVFyF/JG4Hyd4ya0udfqcKBJOoDijyB7ZGh78UZKPxvR7J4K4AFBym50R7Xat5 aqoEskLIZLPtyejfdhZcqXeyRK47frAz8khx0YnYqfLcLnDqeOGmJvUJo1Vf4DLiwM B6SHTwDFA2b7cbUcKpy1ZtzLs645P8kGqIFBtCHjDc/g1Q3KO9/rt7S8xZ+YZ5hu/X LjsJ7qmXnZXvin/vg5JuXW4Um6wVV97fvbH2DJlOqm5sMr/x5fwPsmEThCU1Cbact0 +zqz60GpalDKVF9RRtRUgdf2hQQv1Wrh+Jo+cTiiDkQ3vecSL112ZW8kwZN5pggUo+ L8jVqtqDkoDTw=="
87	"2021-09-25 12:21:51.996"	"Lookup record: s2048d20190430._domainkey.r.grouponmail.nl"
87	"2021-09-25 12:21:52.027"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE2XYKySeCxhPmmsGbSc1z5ERRR7TGLT86PoQ6vEpf52vUHPwEX0YsXpfe/rUkZYybDb6UH04B12cGcVQ+jv7LOIcxYbn+KUVtQkY3aT3jsJ9NGi//GuB9iikeSF0aInJD+WAFBWGJIgraGwC/+V4VdKAm4opLWeCyc4yG73tMQ2mm9m53ldKgIoE2+2QdCYK65/VRc1Uqpz8zCpgDB2CGdZO4+fDCx8LB+xlvkNtI+UqQW2RTnanqysBozYrH+SbYW6o7/kSz+/ERjEHSdlaCrr2FUSiAzTKNU8CVGjr3/mo8C57GTAfuV9jlR6UqgoCU2g210iRb0p+2yxc9Bv5QIDAQAB"
89	"2021-09-25 12:25:18.816"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mailplus2016-12; d=mailplus.nl; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:List-Unsubscribe; bh=pFTWlu3Iek/BcmN4NT13Hwg1u5WNH202yYmtrfvXprY=; b=yCXyL2LzZkHD3rNbe8PapCkNFevoKBeuGCkJUyN6pOmAx0XC7QLbzdHS5Qa2vm20kUXZ3fuJ+6ep J+vrczaqR0iUK+zEVvihAuRADAEMrWDThdSO2QqdM7ms1uyR1cNJ1jyNsHmWleA+vGbhw1cF6zRo uvzrvszQH/pNBZPeN+0="
89	"2021-09-25 12:25:18.816"	"Lookup record: mailplus2016-12._domainkey.mailplus.nl"
89	"2021-09-25 12:25:18.894"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUYPfMP+EKZlF+Ox/D+K8wQhkyBgZuaTkWD4Fr8uQQyxza5qNv7uQNV1VvgmXjJas3+cSZmKzKATiOi5V5BpxHfQwSUsplNqmHzry2j7NGz9gKlfcH0FNn3vt6cKYUpMYxuguUHUNAfHAT8am6eDGX2N0Wg8EVzNgjN37/4+H/hQIDAQAB"
91	"2021-09-25 12:25:57.988"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=r.grouponmail.nl; s=s2048d20190430; t=1632565551; bh=gkAbvWFwBSa91BcqqFcP/1HbTtlauJqerGB2Ekrj3ZU=; h=Date:From:To:Message-ID:Subject:Content-Type; b=bL+pnnT9EX4o8SaisV0+SVXMG8qE1oD/IyMOfeFBMOgtn+6u3m7PwwhkZjWyfDZkh Sp8hMr5ZFARPavLzd2Zwm/I8p3txruo+alRYotrwlsvhNwvgF2l73GFl39BxC24r8u tmLtdjkaXeo4WR/D5uxTlTjQxYfx7XfMKvGl79RsL5ykhXpD9U/5u4s2X2H+i6rigP hEsyUSMGA0KEQBA2EDL6toyg9OJYjKu9PtR3AxADAo1U3Hj+4OcoZ9JCxwBUOX7n3M m8ewbYCuBsP6zq2BSIVzBJITCtFsl4M8UERSs6mRcQAktxgzTtBAfKf/7Cmdvck4jt YMCPOxDmQsnVg=="
91	"2021-09-25 12:25:57.988"	"Lookup record: s2048d20190430._domainkey.r.grouponmail.nl"
91	"2021-09-25 12:25:58.019"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE2XYKySeCxhPmmsGbSc1z5ERRR7TGLT86PoQ6vEpf52vUHPwEX0YsXpfe/rUkZYybDb6UH04B12cGcVQ+jv7LOIcxYbn+KUVtQkY3aT3jsJ9NGi//GuB9iikeSF0aInJD+WAFBWGJIgraGwC/+V4VdKAm4opLWeCyc4yG73tMQ2mm9m53ldKgIoE2+2QdCYK65/VRc1Uqpz8zCpgDB2CGdZO4+fDCx8LB+xlvkNtI+UqQW2RTnanqysBozYrH+SbYW6o7/kSz+/ERjEHSdlaCrr2FUSiAzTKNU8CVGjr3/mo8C57GTAfuV9jlR6UqgoCU2g210iRb0p+2yxc9Bv5QIDAQAB"
93	"2021-09-25 12:29:23.179"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=Re0PSFT0JExbBV/ekkebzfyRHhQwyFlGomBFQTo2BOg=; b=Estz+QSZLIh14431Uz222u1yW3gqG2+OOTOw9JY+cT7rUh2FvMtJ0t6PvSWb33ungB hkfD61o66nbDuf0ILz4C4yNZlw2hLkvNb/czgcxgHTBsi4IXM09GhzyvsSwMEp7u0v8K Gqe4gw8hMsgsNu6D6O5TusExUeLWKpdDDtT/2fL2fJ/HkR362MJDHlJUFYlREVVO+tlF lKOkdVKM/Cjf3arJfiV0qKvvxUNOmVZ06WgucJUTe4CD/0SPm/Ss597nTtIvMNzXjmpu RZ1RB4UbTi3KIP9r/q/JjOuwABbLsynMfqNvUHlBZSLSkgS2pVBL6OqVReen+iEw1vXA Nt0w=="
93	"2021-09-25 12:29:23.195"	"Lookup record: 20210112._domainkey.gmail.com"
93	"2021-09-25 12:29:23.226"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8JxVBMLHZRj1WvIMSHApRY3DraE/EiFiR6IMAlDq9GAnrVy0tDQyBND1G8+1fy5RwssQ9DgfNe7rImwxabWfWxJ1LSmo/DzEdOHOJNQiP/nw7MdmGu+R9hEvBeGRQAmn1jkO46KIw/p2lGvmPSe3+AVD+XyaXZ4vJGTZKFUCnoctAVUyHjSDT7KnEsaiND2rVsDvyisJUAH+EyRfmHSBwfJVHAdJ9oD8cn9NjIun/EHLSIwhCxXmLJlaJeNAFtcGeD2aRGbHaS7M6aTFP+qk4f2ucRx31cyCxbu50CDVfU+d4JkIDNBFDiV+MIpaDFXIf11bGoS08oBBQiyPXgX0wIDAQAB"
95	"2021-09-25 12:30:29.714"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=topbloemen.nl; h=subject:from:mime-version:to:content-type:content-transfer-encoding; s=s1; bh=KXdvDXgpq5NbeFdrV7cLqvkRVIIsy9qxzxKEN9fepSk=; b=RLfxSk8vAIgtfvX80AWSFKDWPhKIcywfJhob+RlqWp0QPvhHNfMH20oXGxCQkRPePNBm vj9evBZPp104y+qF3cX1huZfFFTg1DAUcfDwnMvDlhEKHdxY8iV+6Q44bOHPexsLMIC0YH HgYpByj/UKQied3coph0IkGTSpzHiTfgrMxrAL8eLmvnXc3BT+CPzL9434xaJLPo1PZECd 12ER++jH9aZHR2csSBLZ0KtOnIIighWrtWfFmxbRBc4M31yc8awRYsdl9tnKLJ4+Wt7o+6 o2aXkm2L4E1VnTGv1hsjvi2tM0AOV+ktHPTUn3k5KfoQ6bdxwigek5o3tc1Aoddw=="
95	"2021-09-25 12:30:29.730"	"Lookup record: s1._domainkey.topbloemen.nl"
95	"2021-09-25 12:30:29.808"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwAlqm5D4uaPS+SrjJTfPNHILIxbrjYl8R/JfbgL03WUBOb6DrOsym7vLjo0mtIyn4IyLZadeOWC2AdN4qdJWkiuTdRcexmM7kC5i2GRCnoxpctByn5Fn2OgNteCMK4pdZBaI0uogJaADk/AOoWXDViULRNf9WErX7Cardbk4dtsXZz8ti0FXRkOmqDzj6nLid/66HEt5Cy8KFTFkMuGTY+ZubNmVDRuAHp1T3+wd6ararV0N9iBozXQaBsXiROUt14ojAlP3iV9+ohwf3FoOZPBJ+Wo/RlpDacG1JqW66Cz7p2hu3RsXJvQmjhusHlARbePF0k9oDH2QQY8isk5pwIDAQAB"
98	"2021-09-25 12:34:09.710"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchimpapp.net; s=k2; t=1632566031; i=info=3Dallinhotels.nl@mailchimpapp.net; bh=9EYfNvw1BX6Wa8HXKXEzFGH2WNUdNEWk2Xjki8Zm1QY=; h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe: List-Unsubscribe-Post:Content-Type:MIME-Version; b=C+L3aDaV0OMvRa1Fl8YCJIzz2oio4H2RK1BpOttBX4e5YlmF9RAP60HzZzs4YRi5X 4FB9yEtjShS1Pc73KchoWn/jVFG7ho+kh7Md26AiKOsyENxN4vKfPg7T4/zs1N4Up+ phNgfhIpBHMTfT6FtWZz653DDfFN3I2tdM63ung2d4g/yu6fI+WHvZqiFaOU5IRnPW oC8BdjzGWPSZRXVZMt4veSzGXXdB7CVZhpei3ea8WetXzejhXt13gxdbYjPyU5znf8 kFDoPPA+sw2O0XaUjc2ujdvGY4buUiVZYk7MkAssCsBEORPwkhDOxF02z6GJaJwf0A Nii2eiVlbAbvw=="
98	"2021-09-25 12:34:09.710"	"Lookup record: k2._domainkey.mailchimpapp.net"
98	"2021-09-25 12:34:09.804"	"DKIM record: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8zbrSuBn2HCE6a3H24TOo8MNqOVfKan83iOnG7cvFmpKLb048VSG49QWbmOV7beOG22EVBUU7b3IpQ3nwYptI1kMllSmjpOOpCK+GxZGHOum3cPx65G/862R39MKHsnsZyHZh+7aWyjM78qDfHmDgFGppC3OZzmUId57WawpDHhpTi0+z1UUQ0K50fkiY+qRNjkBRqjsD058E12U97CBk8yD5bl78uARCszn2PVWoXTljmQ0DPkOU/fTxiVG3YBEUrtscEBqYnxxlAj1APkO3dr9wQLbsuZUAM+zBJ3EKnMEbaG2fX7QEz/mTknQqg6uJVu8YO6m8yExJV0cTBgrQIDAQAB;"
100	"2021-09-25 12:35:27.265"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nextdoor.nl; h=content-type:from:mime-version:subject:reply-to:to; s=s1; bh=b7q/8yi0wB/paMNb+GVj6/3LULV/nyzKFWDDa/ACa6E=; b=MOeVKj4316T5h0UnkOPz0Xm3zIRwBUC1hC0SbU3TJwSt7kmwiNvX3FCqK3lndmjgBHG3 7J7fZyQqR6EnaMyvt9QhK09DMpnqVAha1fVBgXHtgDO04wJJNrfClIpj63su4sPDNOkGkC fKllFG6DFov+ciX8jSqGlIRgYMpBbINepQI/JvIEvfQ/mA5x3DjlKAUbY7e2F0IesIDw8x 5/sqizJhrG1ohiSiORMumD6OPc8OQEW3S5VDBN2839SqV0sE2iulrtFcyYsGpo8LCfHqGI xNqBBkUzlDt8VDIx1oDZltOAIkUBOPvOJBDj68x+XEpfgyz9PS385h8qgNXQEeSw=="
100	"2021-09-25 12:35:27.265"	"Lookup record: s1._domainkey.nextdoor.nl"
100	"2021-09-25 12:35:27.390"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HUt3Q3nWMzRlrLo5SHlADr6VVU48hs8PPsKnV4ezylGaIGt6o9ajqY31XJv/t8a49jLBEmzNnwdHfaKwlskxG3zjUfZGh42AyXK7Y6q0tYHGeTbtdy8e6BfFbNRZdBw+9jkBJc3wkR3pYUMtsWjnxQPoUdE8HMyd9jnjV5h+Uyqvg8VCa7AwWiVxb92hpGRAgDbU2c7ekQ0bRIvLmLmN7t4Efl5YpK+9krvv93zqrUv55889dSaNFNuW4ZGQUoDhB2qQ97TD6zrT0WwVF956XPPHnIpkvjxg0CeAsTMbT4vWfConE2XR5G/em4Jkqhcw5Y9AmIVTO+tEMytub3hdwIDAQAB"
103	"2021-09-25 12:43:42.945"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=spotify.com; h=content-type:from:mime-version:subject:to; s=s1; bh=aWWT4Rhr3HuBWSP5MzvPi3Oqbs/J0U+MKWJxTyXl8Co=; b=oru5EOliGq7bn/j5x3DoKxQDpzTBa5/jYeRsIZBVz9xGmPuO8iTpu9MmuDi/NIq9iwpw oM9/b646GaycwYOArTpRSXGXGOh1yZUg2lEN9nUe4EfTXaN5Gh7jcKZ3fpYvWDc/edFpXW xu96YIwzlXqjrDkJsbGSpFbeD5KmvhjpVByVHDVmxDEoKEKllYC0XUulERwn4Vl9Wf24oA 3O4y3Y1QUpJziQak/ycir8R+W+DoiknrR5pvoQmBKGdXyyA6lRiTcQp0B1WpIrYild6RWW Z9ySe25hHs2v0BVASfjle+zMLrr56g1FBi32NuoD/duOmhcgDmb7DkraqjWMk9EQ=="
103	"2021-09-25 12:43:42.945"	"Lookup record: s1._domainkey.spotify.com"
103	"2021-09-25 12:43:43.007"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCEk4DORulk0uxTYFhRfxKQbzjyivhHvdGQ67vgWCVOadxLvfR2NvDEQMwIzF50dCeQHVYtCpcQtId83cf3tPlbEOp7gpGXLo/sAsr0ECP0REg6wVwuDf92j0gb3PBCtHc6Esd5vaKDCeNUqI++HTkdzj3h6s0s3fvkak08OKqbbQZWa9l1e57AO23yMLuRxd2QrW0b0ClAZM5q7J6MNp9+oBmkMkPr4UufBkgr3+sVpRZvzQmT3tjf5dTKZN9j9JNl+5NCB2ewAfEnRdNWrrL9+3upJH3F4b+Oky28n9Y/JVXddP6/XPKtewbKqdqQ9iUoKOXY+gWZjuANPuwAHdwIDAQAB"
104	"2021-09-25 12:44:49.070"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=chello.nl; s=202002corplgsmtpnl; t=1632566687; bh=37ZHLMz5XcFWlIYPsrm/3UeNkqDllaZ0SxHp/Q5AXMg=; h=From:To:References:In-Reply-To:Subject:Date; b=RlBio0vY5KxRPi5J9zNNlT2eTt0A0V81lPzMyDJiXpt4Ldw1Fe2lzd6Hi+9SDjK8i RRf8T3pA1jtAmD2hiJZalXA9jiN/RtozZ5v77HTkqBYIR5DgQJieU7N1dsY6NGME5R kYH0nBbSEAoTYbm1fZ1ugJlXfT/L3L4/yUSJ7nMwwfK+wPnWhWm8KgCS15UWhGIDPW f1nFJrbM7eP+rFA8Fnceb9TEa4qxK/t8spEILk8K4v+xM0iMT8vkTknrEM69KVSPJ1 29QTEaFFngOEdtolCF25Nu2RAipARyyaZncRUSBxf60eZz416+jcxEivUvYcETji/P Ttqwj0gkwEdMg=="
104	"2021-09-25 12:44:49.085"	"Lookup record: 202002corplgsmtpnl._domainkey.chello.nl"
104	"2021-09-25 12:44:49.148"	"DKIM record: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPVkfwCg03jDoButgT4tMLWcSqE0d2TTDeaMNgoLNW3eymjp9k2rohOtS8RT8m1o40VciIa8A+HCO8B5FNryaKQqJoNmGSZ1nmVNB1fThr/aPeosUwxUvPNWN8KnHHgOtQUj/8PAL+TlArjWcedQIob/G5n2ayL+q3KoNsoqF3d8iqHgVvtglteZbxwl50e1J9tS/QAp2Jko0ZIt+3wwX4FHLFkjug6tQdx4jQ/qEMdtwstkwv1cZwOpRROAX5x+ayGdj2MeaDo5ZwR8oW/uYfP4W7O09LzgbgkKQ5XPJXOhbPWzhqt758TJzSvHAkUBSUigDaWH5dmdOw6UNdoLJwIDAQAB"
105	"2021-09-25 12:45:28.960"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=liveauctioneers.com; s=mandrill; t=1632566718; i=noreply@liveauctioneers.com; bh=Wc6WyrbE4ciqHIOzaMKXeOctBGqy6OcJfbJaV8z12Z0=; h=From:Subject:To:Message-Id:Date:MIME-Version:Content-Type; b=nsfCgcYla+LoFelUDKwkB8+YfTV7mP403zRnSEywUq90uiUTW6twNtZn0rcQu4UdW qLSLulJi6e0rHZa6a80GNjAOlGEGgk+i65Gd2dNlL4Bns7QMvOFksOYRZSP3+xg3Ac C9UmPYITGT4zKpG4KtUxiiMyzOxMPMZeJM4UyT8A="
105	"2021-09-25 12:45:28.960"	"Lookup record: mandrill._domainkey.liveauctioneers.com"
105	"2021-09-25 12:45:29.007"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;"
109	"2021-09-25 12:50:02.550"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1632566987; bh=xrmkfp7pz8A2EHJdi3/gJfml3wMzQXvoBaMI1wOHx1E=; h=Date:From:To:Subject:From:Subject:Reply-To; b=cw8uWIGFOoQ7Wy4pJzDSAqdBePzipuP8C+F36W4XYh1pC2tYwHI8WZveNfMNVj5hly95n39uEGPimycYIbpQ0dem75GSv2e/jL0iRedWzN7T8VYm+7nIl45rj+WOaajSSxmIj2/iFny941Cqc0EOdpN+QJJcq1KeD+Zgb/qOIUENIsBwn45hrTy6SgAG0q9l5BaguUHT9PemsqRxY8MVQJtEG4JwTQJcFAE6d/mTs+u01ZcK09kmf8mDgUy/yrU5ysdhMTdXRxOeRmtdOepnfqLOU27+ui41MslWbaZOsDkQ+5DhVUgTtkS1M36ZbnLmLPqXVJVGuaUwUXBeO0TMQg=="
109	"2021-09-25 12:50:02.566"	"Lookup record: s2048._domainkey.yahoo.com"
109	"2021-09-25 12:50:02.597"	"DKIM record: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoWufgbWw58MczUGbMv176RaxdZGOMkQmn8OOJ/HGoQ6dalSMWiLaj8IMcHC1cubJx2gziAPQHVPtFYayyLA4ayJUSNk10/uqfByiU8qiPCE4JSFrpxflhMIKV4bt+g1uHw7wLzguCf4YAoR6XxUKRsAoHuoF7M+v6bMZ/X1G+viWHkBl4UfgJQ6O8F1ckKKoZ5KqUkJH5pDaqbgs+F3PpyiAUQfB6EEzOA1KMPRWJGpzgPtKoukDcQuKUw9GAul7kSIyEcizqrbaUKNLGAmz0elkqRnzIsVpz6jdT1/YV5Ri6YUOQ5sN5bqNzZ8TxoQlkbVRy6eKOjUnoSSTmSAhwIDAQAB;"
111	"2021-09-25 12:56:27.625"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=reijnierse-eu.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:in-reply-to:to; bh=Ej2y3zAao1WkEe6AP5iUBklve0/gVn5kj/van+gX+/w=; b=u2n20RHmQAMTypZA2N2MnoeOvHQf13DIgyInelGjacCGw+jjvrla7iYvqZczdYHkEm GkayzbsCLq6sMrZAnfY7cdJuEmAi4gerWSCWtX52SVQm2CBYfJQEFeEGFWCX7FBrBTak 5HP5c78Zz3J4zv64Hv20QT7LO64ecdSstDyTlaK8wQxKnErrwSbShvql/US1qV3DRq0k E8fZPB006I05g7iWmp+hk5XSFFVgh1O4B1yWUvsRb1QVJUoqbhNc57l4V75zcTGkQasv J24gT1FhDGFe2LoQo85hQjNo9eYe9lVYPN7cxSexK03ur1uoK/C2sjlBIoHwCi7cFxlM znUA=="
111	"2021-09-25 12:56:27.625"	"Lookup record: 20210112._domainkey.reijnierse-eu.20210112.gappssmtp.com"
111	"2021-09-25 12:56:27.750"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XlwdG7GKz3E2ynrLRPzb3iP/vNCfrMdcN1Akhrj1Snu5pQi3gSnI6U5KWM56An4eC+c+BHq5ujk9HEdk04HYRIT0CjW9fIqeFQmahOivtPBAN6oOg/VQ2Y2L5IE4gHHjLOQzPXC4H5soG8PNWPK00NEQ5Y6lUGWubuMJnQtrVyHMCcDeXh0So1n5DAgtO1UvhyvZ82hrx7hhiMuTZ8yQ+f8AzxcjYL9x/+M7hmrUDnA8Np7j1/OU/wiKWvsllKSFElGQpFd8VFYYv+qt4sUAzqfkYqvWKLGXhWbpm1uY1ce1qSQiEFMd7ycz754lMhc15lZfU3TdiGhQjgps+gQIwIDAQAB"
112	"2021-09-25 12:57:44.050"	"DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; t=1632567458; c=relaxed/simple; s=zero; bh=1A4Lmiw6nvY2tlRntreU1qDWmGydqR476tgw1SFif9U=; d=copernica.com; h=List-Unsubscribe:Feedback-ID:Subject:To:From:Message-ID:Date: MIME-Version:Content-Type; x=1635721200; b=W4OThjzq2puG0r+WglzVwy4gFmOuyNx2z54AH13OXSCosaG3USJE9yqPiKToOFUfulBS4zL1 HoEDoBPdlTqv/74h8EnvqWwAyIMlCvsXJ87isvWF91rEK+UPNriZ/cgdAocCVH4t81W2G0gWae Drnc3v+MilSmNn6aUg2BjQy8U="
112	"2021-09-25 12:57:44.050"	"Lookup record: zero._domainkey.copernica.com"
112	"2021-09-25 12:57:44.136"	"DKIM record: v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3BezPLiu//zIbU3W8MX8kh8pK7WXRxzY03jDvXDathUIYZWdujewsgVotHm/q1cOmDYSjzMz1hueIj1u94gXO7TNPUlSrcZ4jmaIYqxFlT8y/pPtpVF85DGdYbUC/vRzA1i5moFYFphxJWIdJVaAi8OHh4B73YvGuR9jGTDP28wIDAQAB"
114	"2021-09-25 13:00:21.132"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=toekomst.onmicrosoft.com; s=selector2-toekomst-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=DMl2S9AzEM0jQotVNqgMCKqsKj5zNFKvCE3PkX+jaP4=; b=NfNSa3WiX0pK3ckL+575KnGLWCNhwucpFeugnbHSUp31PU1+CtEEGHyDS6d1WTi6dfCVzkdUeDvYbNvvmCCmjE/LR3tFzCa5sBX42P+7mgazfXxOFIYH0+3UnsoFD8H+FnxM1r4VuiCH0tAasjFPAMsuGS5CiBr9iTMbV47KNxo="
114	"2021-09-25 13:00:21.148"	"Lookup record: selector2-toekomst-onmicrosoft-com._domainkey.toekomst.onmicrosoft.com"
114	"2021-09-25 13:00:21.320"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDT334t8bgClRxLHwyJViAWiMqikgaeDZQgA8ZCyu1jwA//HaYnONAiSTdhisj825Ki41VXDmFcsPfHNluz19WeD2e2tMn+i50vwfrJn/LCte/0iRJ1vI3yyPp8NT3TaAbCdNrLf69DTbRfot2FalfgRg9M78i6LJ6udjDKnfAKWQIDAQAB;"
122	"2021-09-25 13:14:44.640"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l8+7LQ/kLlrMwfDACxeOO7sDhVQGSyqa6kBlZGJ1UAU=; b=NIXiyUwmBhN4+QotQ9h+/5kj5aNsIjXyArHk5zHn4kMfZhuLd6lbdQVq1OGNI/sX5BcwxJCpWh1SzLJHIvnNVA43Sz16S11zRKgO1/Kmvah3393woe7PtV890cvMreptBUEotkEppQZ0p2ySH6TzEoT9SQDSdJnCyh0tg4FvroyLfwu6RSxbPAuNuyhIYkku+2bByzx3HM/HfvtdH2Kh5s/HCJ9vn3MsxFUP0svo8voXrkcRhRiUgEiYYTqi/CXOagHJlSkwz5H4Q2RpWlcA41XKrNjShJl62YsMtb99G4iX8EFRPMDt+QPFVzG+9IvrU5aIxq3iWFF5deUSH1owdQ=="
122	"2021-09-25 13:14:44.640"	"Lookup record: selector1._domainkey.hotmail.com"
122	"2021-09-25 13:14:45.000"	"DKIM record: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913"
123	"2021-09-25 13:15:20.640"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:date:message-id:subject:from:to:content-disposition :content-transfer-encoding; bh=wGb6oN1C9XvIduw08frQtzGC3nmBtsMacvk4JLdTEmQ=; b=NZH8mQXjzg1tkhB2eR5RvEpZmJeH+SHqKcgkNYzBy+k1bJ4w97I8pEc8OqQy6FzbVV zDMPba5LSEQQMeAQxyWNYRlTHyeks2gEcplRy7o5YD8cITFTA1urri0hO3lvrcVkuLSL JTsK/4KlRaoK9xY+dnJlRG5A1ehFovolj4Q/20p0u1rdtVM7Y85jgoxJq4EobrhlUghB Rn7+qP3LZAamQMLWbQ9jZ47k6qpgB3tLyShDtkgZimZum7n038Uj0oMMky2lxHwqT9Ei 0+LLXa53heOTWglS+uAKRYqDrXr49nolXBa3W4zE2erGGDCnx4ZVT1CsVZQbMIvyqLYt 03fg=="
123	"2021-09-25 13:15:20.656"	"Lookup record: 20210112._domainkey.google.com"
123	"2021-09-25 13:15:20.703"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbQAeqvEP2pG2L540W9JvVU7qy767Zs83Hjw34PCkZ9/9dWE6cK+CYaMNIQqTGfwq4uUe3diBuz3Uikkr+WPMj9AuxtxJqUAO8PsZ2Y5DneFpz5kVesC9/rtXgCwgYOmO9UjSy4IN11ewXUBuCH+zp2v5Abv5T0Lol/nWl8wLgRI1IesstingY4cnSfo3Pq3U0I1GAxdNFCK2FPedPpg4sdPpHqtxVvRLMLamRKoUfySBMjpXuMNL0UeCizmFfdUL73ZdiS+MNxGECzFNmeCngFBscLQN++urvfB9OqHQrbxLIwNyni3KMbE/E+cxPkx4KxhyGHSU2klV1vvIAHfwIDAQAB"
125	"2021-09-25 13:19:47.039"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:date:message-id:subject:from:to:content-disposition :content-transfer-encoding; bh=ke/iHFVT1srMv/JyCXOplj2HA1ri89PxeOhfeGCK0as=; b=L0YXGGkt9svJYkmARoGN6wiU+ZkwRdanae9OeTQJ2m6pC3go7XeQhhMljHa+MCecrs w2M+I5qxU8PBFo/EpQ2ShFfUwfjx0AJmdpGodL7A2lZjlu0hZhsy1owEax74J+pmGHEN /Sp+bZvjFsMwc+rVi6OTz3EF576ejx3tzDmgTtsY91HN82owjwERvkpX80v1Eo+vFk2g FM0w27DGuZ+gONZe6aY5yJji8tQ72XUYOPEEgBkKMjMcV343e0wmQvzGOC3eJgkNulk9 mRBVak+daOH/7zbAnfavYVErQjJK0VVD1G5ricRIWsK3uy5FXWeJ5dz2PxrZvP+HUICb fQNw=="
125	"2021-09-25 13:19:47.058"	"Lookup record: 20210112._domainkey.google.com"
125	"2021-09-25 13:19:47.070"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbQAeqvEP2pG2L540W9JvVU7qy767Zs83Hjw34PCkZ9/9dWE6cK+CYaMNIQqTGfwq4uUe3diBuz3Uikkr+WPMj9AuxtxJqUAO8PsZ2Y5DneFpz5kVesC9/rtXgCwgYOmO9UjSy4IN11ewXUBuCH+zp2v5Abv5T0Lol/nWl8wLgRI1IesstingY4cnSfo3Pq3U0I1GAxdNFCK2FPedPpg4sdPpHqtxVvRLMLamRKoUfySBMjpXuMNL0UeCizmFfdUL73ZdiS+MNxGECzFNmeCngFBscLQN++urvfB9OqHQrbxLIwNyni3KMbE/E+cxPkx4KxhyGHSU2klV1vvIAHfwIDAQAB"
127	"2021-09-25 13:22:23.304"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=topbloemen.nl; h=subject:from:mime-version:to:content-type:content-transfer-encoding; s=s1; bh=OQ1O46xdanfB2lq0uaifgWmO3EkRPbYu2dpN+/dows4=; b=P2M1Rjalu190axSVL9qIWvl8pssyOJ5p8k9Iki7SL+tigHWtrQZwwMY2bHhEqxeX88nt sBxfNBWknspDw08JNraHLAbgQ3PMHZBG1RCD3xfW2J6S3nI8BvnLVLs0B+ziq0fOTB1MHm Q6R0+eTvnJQcm5Ueesh0rehvB4QGMuY+7QUN3necI/Ovi3nLW1jC1dA+SAVX2CLXPZgk4G z5XAKAfU/1ZOYLoUmPK2Bxu/1tMT53YPoY8YztcslRsisCq9XeH2DiLOAAxcpcZO+M58cr vWkBaV8FlJdB30T//P6/X9C4zTNZGIjBTWOFR7lb3WYmDx0VUiWbF7nCEXxxgaBA=="
127	"2021-09-25 13:22:23.320"	"Lookup record: s1._domainkey.topbloemen.nl"
127	"2021-09-25 13:22:23.335"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwAlqm5D4uaPS+SrjJTfPNHILIxbrjYl8R/JfbgL03WUBOb6DrOsym7vLjo0mtIyn4IyLZadeOWC2AdN4qdJWkiuTdRcexmM7kC5i2GRCnoxpctByn5Fn2OgNteCMK4pdZBaI0uogJaADk/AOoWXDViULRNf9WErX7Cardbk4dtsXZz8ti0FXRkOmqDzj6nLid/66HEt5Cy8KFTFkMuGTY+ZubNmVDRuAHp1T3+wd6ararV0N9iBozXQaBsXiROUt14ojAlP3iV9+ohwf3FoOZPBJ+Wo/RlpDacG1JqW66Cz7p2hu3RsXJvQmjhusHlARbePF0k9oDH2QQY8isk5pwIDAQAB"
128	"2021-09-25 13:26:14.652"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:date:message-id:subject:from:to:content-disposition :content-transfer-encoding; bh=ke/iHFVT1srMv/JyCXOplj2HA1ri89PxeOhfeGCK0as=; b=L0YXGGkt9svJYkmARoGN6wiU+ZkwRdanae9OeTQJ2m6pC3go7XeQhhMljHa+MCecrs w2M+I5qxU8PBFo/EpQ2ShFfUwfjx0AJmdpGodL7A2lZjlu0hZhsy1owEax74J+pmGHEN /Sp+bZvjFsMwc+rVi6OTz3EF576ejx3tzDmgTtsY91HN82owjwERvkpX80v1Eo+vFk2g FM0w27DGuZ+gONZe6aY5yJji8tQ72XUYOPEEgBkKMjMcV343e0wmQvzGOC3eJgkNulk9 mRBVak+daOH/7zbAnfavYVErQjJK0VVD1G5ricRIWsK3uy5FXWeJ5dz2PxrZvP+HUICb fQNw=="
128	"2021-09-25 13:26:14.667"	"Lookup record: 20210112._domainkey.google.com"
128	"2021-09-25 13:26:14.699"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbQAeqvEP2pG2L540W9JvVU7qy767Zs83Hjw34PCkZ9/9dWE6cK+CYaMNIQqTGfwq4uUe3diBuz3Uikkr+WPMj9AuxtxJqUAO8PsZ2Y5DneFpz5kVesC9/rtXgCwgYOmO9UjSy4IN11ewXUBuCH+zp2v5Abv5T0Lol/nWl8wLgRI1IesstingY4cnSfo3Pq3U0I1GAxdNFCK2FPedPpg4sdPpHqtxVvRLMLamRKoUfySBMjpXuMNL0UeCizmFfdUL73ZdiS+MNxGECzFNmeCngFBscLQN++urvfB9OqHQrbxLIwNyni3KMbE/E+cxPkx4KxhyGHSU2klV1vvIAHfwIDAQAB"
130	"2021-09-25 13:28:16.417"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=topbloemen.nl; h=subject:from:mime-version:to:content-type:content-transfer-encoding; s=s1; bh=6l6nxxWJx9sLfvpzfLgpttZ2kLKm0TDMomnnUxBoH5M=; b=uMnemkoAvilMBh8SVqCPV1xVBbraFjW6jDi5H+XZithk6+jv4/1aHqSPqyohDXm9vDsh m29Q2X4dogTEe0P+Yww6yvcunKsGTRlXD7qHIWIV7RU3LgCmyoJty0F+wYRu+9isyNcc/A sY7Mof5GPF5999yornpmy7ORJIhlH16G8RyGQPjjEEdVmWHnHIrpAj8shx+yFui9jBEtjx Lr8I9PvPNKX3QG2v8A5OOKjHkO+oiWbJI4XidI/KUnvAhQ4rO5D1Qly/9+oN0LWkKeUXub VU9kEgrovcyt/IPow+aJYgJnNxbLsNl4nKBucHnjFvVXdx2V0Aa/SSqfgZvkUbuQ=="
130	"2021-09-25 13:28:16.433"	"Lookup record: s1._domainkey.topbloemen.nl"
130	"2021-09-25 13:28:16.464"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwAlqm5D4uaPS+SrjJTfPNHILIxbrjYl8R/JfbgL03WUBOb6DrOsym7vLjo0mtIyn4IyLZadeOWC2AdN4qdJWkiuTdRcexmM7kC5i2GRCnoxpctByn5Fn2OgNteCMK4pdZBaI0uogJaADk/AOoWXDViULRNf9WErX7Cardbk4dtsXZz8ti0FXRkOmqDzj6nLid/66HEt5Cy8KFTFkMuGTY+ZubNmVDRuAHp1T3+wd6ararV0N9iBozXQaBsXiROUt14ojAlP3iV9+ohwf3FoOZPBJ+Wo/RlpDacG1JqW66Cz7p2hu3RsXJvQmjhusHlARbePF0k9oDH2QQY8isk5pwIDAQAB"
131	"2021-09-25 13:32:51.906"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=liveauctioneers.com; s=mandrill; t=1632569558; i=noreply@liveauctioneers.com; bh=UIr2KFqfYUw5ymPVUP8+WpX2Iga5BPpUWOqMUtqjCpE=; h=From:Subject:To:Message-Id:Date:MIME-Version:Content-Type; b=BUQMYiNCQfEoNaug4ZLSkCDQjgaNFguEiCfyD4cU4O+bOlBtACxmiqA5BcjJ6V91Q aTecvTkKV5YndL/oPx6RQ54f82thNg3B7OHZRILFXsrzg8RvnQ9dboyEqJp9bvjTpa WNgExOyXtEcU8S9ppJF3D5gR/fMK3rnmQ9j9g5Kg="
131	"2021-09-25 13:32:51.906"	"Lookup record: mandrill._domainkey.liveauctioneers.com"
131	"2021-09-25 13:32:51.953"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;"
132	"2021-09-25 13:34:07.800"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:date:message-id:subject:from:to:content-disposition :content-transfer-encoding; bh=ke/iHFVT1srMv/JyCXOplj2HA1ri89PxeOhfeGCK0as=; b=L0YXGGkt9svJYkmARoGN6wiU+ZkwRdanae9OeTQJ2m6pC3go7XeQhhMljHa+MCecrs w2M+I5qxU8PBFo/EpQ2ShFfUwfjx0AJmdpGodL7A2lZjlu0hZhsy1owEax74J+pmGHEN /Sp+bZvjFsMwc+rVi6OTz3EF576ejx3tzDmgTtsY91HN82owjwERvkpX80v1Eo+vFk2g FM0w27DGuZ+gONZe6aY5yJji8tQ72XUYOPEEgBkKMjMcV343e0wmQvzGOC3eJgkNulk9 mRBVak+daOH/7zbAnfavYVErQjJK0VVD1G5ricRIWsK3uy5FXWeJ5dz2PxrZvP+HUICb fQNw=="
132	"2021-09-25 13:34:07.800"	"Lookup record: 20210112._domainkey.google.com"
132	"2021-09-25 13:34:07.832"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbQAeqvEP2pG2L540W9JvVU7qy767Zs83Hjw34PCkZ9/9dWE6cK+CYaMNIQqTGfwq4uUe3diBuz3Uikkr+WPMj9AuxtxJqUAO8PsZ2Y5DneFpz5kVesC9/rtXgCwgYOmO9UjSy4IN11ewXUBuCH+zp2v5Abv5T0Lol/nWl8wLgRI1IesstingY4cnSfo3Pq3U0I1GAxdNFCK2FPedPpg4sdPpHqtxVvRLMLamRKoUfySBMjpXuMNL0UeCizmFfdUL73ZdiS+MNxGECzFNmeCngFBscLQN++urvfB9OqHQrbxLIwNyni3KMbE/E+cxPkx4KxhyGHSU2klV1vvIAHfwIDAQAB"
134	"2021-09-25 13:35:33.164"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:date:message-id:subject:from:to:content-disposition :content-transfer-encoding; bh=ke/iHFVT1srMv/JyCXOplj2HA1ri89PxeOhfeGCK0as=; b=L0YXGGkt9svJYkmARoGN6wiU+ZkwRdanae9OeTQJ2m6pC3go7XeQhhMljHa+MCecrs w2M+I5qxU8PBFo/EpQ2ShFfUwfjx0AJmdpGodL7A2lZjlu0hZhsy1owEax74J+pmGHEN /Sp+bZvjFsMwc+rVi6OTz3EF576ejx3tzDmgTtsY91HN82owjwERvkpX80v1Eo+vFk2g FM0w27DGuZ+gONZe6aY5yJji8tQ72XUYOPEEgBkKMjMcV343e0wmQvzGOC3eJgkNulk9 mRBVak+daOH/7zbAnfavYVErQjJK0VVD1G5ricRIWsK3uy5FXWeJ5dz2PxrZvP+HUICb fQNw=="
134	"2021-09-25 13:35:33.164"	"Lookup record: 20210112._domainkey.google.com"
134	"2021-09-25 13:35:33.195"	"DKIM record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbQAeqvEP2pG2L540W9JvVU7qy767Zs83Hjw34PCkZ9/9dWE6cK+CYaMNIQqTGfwq4uUe3diBuz3Uikkr+WPMj9AuxtxJqUAO8PsZ2Y5DneFpz5kVesC9/rtXgCwgYOmO9UjSy4IN11ewXUBuCH+zp2v5Abv5T0Lol/nWl8wLgRI1IesstingY4cnSfo3Pq3U0I1GAxdNFCK2FPedPpg4sdPpHqtxVvRLMLamRKoUfySBMjpXuMNL0UeCizmFfdUL73ZdiS+MNxGECzFNmeCngFBscLQN++urvfB9OqHQrbxLIwNyni3KMbE/E+cxPkx4KxhyGHSU2klV1vvIAHfwIDAQAB"
137	"2021-09-25 13:43:44.488"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nextdoor.nl; h=content-type:from:mime-version:subject:to; s=s1; bh=EmKDf+EjbHVLRI2Y/L5lYMWjDgVD4btSdJIURUJbTog=; b=YBzi5Q+EUHEzqxnL881LwOb3ceLCAVQJubwrLmKEMr1/FIAJWyt/IL2Xcu4Za58j84QC E3ta6DtX3GseQH3ozljTlEnKKYK3xlQnvZQwhHSW7j5Vx0Xsya0MDLM79C3znvfmAhJ0YM 1d2iIJxYA7WaglA0322LBtNzYtEv+fen2+RF5Bs0K9/gjAzTm9v35QPjwh4aiYhovxy9m3 m0BAEOrGcYyQI4B5ZBxBGApqWANxyVz1xurEzYO3PsjBPXj+FzTke55ya/ht5PDqU3ym4F JmDEeLb0CIW0tPmrtZGpRvJs21dYxi2XsoW5xIO2KL7DPbDpJYqo9h0sTUFlpTow=="
137	"2021-09-25 13:43:44.488"	"Lookup record: s1._domainkey.nextdoor.nl"
137	"2021-09-25 13:43:44.613"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HUt3Q3nWMzRlrLo5SHlADr6VVU48hs8PPsKnV4ezylGaIGt6o9ajqY31XJv/t8a49jLBEmzNnwdHfaKwlskxG3zjUfZGh42AyXK7Y6q0tYHGeTbtdy8e6BfFbNRZdBw+9jkBJc3wkR3pYUMtsWjnxQPoUdE8HMyd9jnjV5h+Uyqvg8VCa7AwWiVxb92hpGRAgDbU2c7ekQ0bRIvLmLmN7t4Efl5YpK+9krvv93zqrUv55889dSaNFNuW4ZGQUoDhB2qQ97TD6zrT0WwVF956XPPHnIpkvjxg0CeAsTMbT4vWfConE2XR5G/em4Jkqhcw5Y9AmIVTO+tEMytub3hdwIDAQAB"
138	"2021-09-25 13:53:49.972"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchimpapp.net; s=k2; t=1632570806; i=sales=3Dsnarenshop.nl@mailchimpapp.net; bh=psaEszjuQ6KvexBiI3RTFXKl8fVbRRFzxBie5Vd0iKo=; h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe: List-Unsubscribe-Post:Content-Type:MIME-Version; b=dW0R0r5iIDSDW/gnVRIWUlDiMlTHmdGU5KIGzqhW7DdFJAoZQx32WudJiYDwYjWcM U/1LTI2WVxrUDhVbU/KqRJvbvU6E6W6cwE3B3vGwYQ3Ca/uI2QWjYPR7lEkHSxhIOF Y1eIQcRAIwkMIt60+yRl6STn/bS27PwLYY+oPUH5WmJcbJc8jpevPsf2N4I05zZYFr jsgScSOOVwXleZ4EQfDJ1OIy66eDmJWaFY8fScu+xL3eZfToT69rvpC9uWzPoz+JGE N8c+WUzrcNx7ceNU6lufvwKkPQbJ2uz7DIduI73HoiVcqi4E2f/svHY61QlmZD92Ir qqmgmnX0O1Z/A=="
138	"2021-09-25 13:53:49.972"	"Lookup record: 3Dsnarenshop.nl@mailchimpapp.net._domainkey.mailchimpapp.net"
138	"2021-09-25 13:53:50.144"	"DKIM record: "
139	"2021-09-25 13:56:52.710"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=twitter.com; s=dkim-201406; t=1632570993; bh=A2L/pVh+GrPb3SHwoxpRGyYlESm0EToPa1EGL/mCQlc=; h=Date:From:To:Subject:MIME-Version:Content-Type:List-Unsubscribe: Message-ID; b=X4IpnaFjbsNFjLNznFM9Cf9e+sskZAbFfdBBYEVPqtIXxihEMuRXSoPuUTXuLrepJ JPpj0KmxshTtAV2hQqqIGAZeAnqoQ3f47jU35Rp5/diEzigrEzxBmcSVZAxssMmho3 WzYP8TFQ5DP/LYuNlMA1YCEL/kylusMscZWHF/yNv5HpVBFvopzpTz8svm+yZzjtGH uevrNiTBW/nlFcuUrgjG7ZT7VfJ2D0jUwvJhKvjzJHWmNr3mClK4zk22C6xIpxSBYk /53ZzFtfvWjPblAkpVv7/w5gBSfYRVOyCOg+lor6kQLn7rzsSXpcsKEIZQvD9JpKc/ Md5NaD8hydHqQ=="
139	"2021-09-25 13:56:52.710"	"Lookup record: dkim-201406._domainkey.twitter.com"
139	"2021-09-25 13:56:52.757"	"DKIM record: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe34ubzrMzM9sT0XVkcc3UXd7W+EHCyHoqn70l2AxXox52lAZzH/UnKwAoO+5qsuP7T9QOifIJ9ddNH9lEQ95Y/GdHBsPLGdgSJIs95mXNxscD6MSyejpenMGL9TPQAcxfqY5xPViZ+1wA1qcryjdZKRqf1f4fpMY+x3b8k7H5Qyf/Smz0sv4xFsx1r+THNIz0rzk2LO3GvE0f1ybp6P+5eAelYU4mGeZQqsKw/eB20I3jHWEyGrXuvzB67nt6ddI+N2eD5K38wg/aSytOsb5O+bUSEe7P0zx9ebRRVknCD6uuqG3gSmQmttlD5OrMWSXzrPIXe8eTBaaPd+e/jfxwIDAQAB"
141	"2021-09-25 14:02:00.746"	"DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=email.sygic.com; q=dns/txt; s=pic; t=1632571306; h=Content-Type: Mime-Version: Subject: From: To: Sender: Message-Id: Date; bh=2pk3ZSjSCdl70UX/K0n+/NswaLzhNZh+zDIoBaSwiUw=; b=NSQyTmizcfz/xTR6lUkpr3ORcXRaGhS133+PMbRHlL3GvDi2dAxRdvyP+Bi6QNYzeN4hG0cP 2cP/gRJwsxo9Ew1jw+3q22A6ZoILRshA/IqZvF2+gTzrA8i5yRI7ShY0Z7G5PVcgWerLuu5R bia/iVrJfK7ANAsLyU7EfC6mp6g="
141	"2021-09-25 14:02:00.761"	"Lookup record: pic._domainkey.email.sygic.com"
141	"2021-09-25 14:02:00.828"	"DKIM record: v=DKIM1;k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC884b5oXYoePMzotN0VfAli3r7Kc22k6salhwnfkuE/TVh3qRaD02o0cgpJ+oeF1fAPx+cV8IRoldedrZERp28ViQ/g6KJ0yfZt5WvdZXSm5hdzVE5C6D6H1KvU6FM8B/DRkF6GlcKLB98A1484PJi00iuzwf3xyYel8YYNmNOWwIDAQAB"
142	"2021-09-25 14:06:22.113"	"DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; t=1632571567; c=relaxed/simple; s=zero; bh=G2El5qw+H8pS+ZslLwDOU+ZAz+TAw+TMTskAnmbex0M=; d=copernica.com; h=List-Unsubscribe:Feedback-ID:Subject:To:From:Message-ID:Date: MIME-Version:Content-Type; x=1635721200; b=mfzrI/+WIcUNxyUP/ghqNsxk1tf4cR13R47CamItzGNk9Mx5GNNusdpP7n6cJIm5rgIrlQgp pyDuqPTeOglrGFe2I9VK5GCgCb9izmy/JCpHvnA8/6nyq6/rh0uldKr9VE/RrGzzv6U3PLntaU qCzsf6ciGA08sdxYbxfq7+/JM="
142	"2021-09-25 14:06:22.128"	"Lookup record: zero._domainkey.copernica.com"
142	"2021-09-25 14:06:22.160"	"DKIM record: v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3BezPLiu//zIbU3W8MX8kh8pK7WXRxzY03jDvXDathUIYZWdujewsgVotHm/q1cOmDYSjzMz1hueIj1u94gXO7TNPUlSrcZ4jmaIYqxFlT8y/pPtpVF85DGdYbUC/vRzA1i5moFYFphxJWIdJVaAi8OHh4B73YvGuR9jGTDP28wIDAQAB"
143	"2021-09-25 14:19:55.843"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchimpapp.net; s=k2; t=1632572380; i=info=3Dpro-nano.nl@mailchimpapp.net; bh=onVKdYgCnFVpD1htVn1ryUvJmttAthxhtC7LUGQJt1g=; h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe: List-Unsubscribe-Post:Content-Type:MIME-Version; b=r/FqK8a3kakHg4x9W/qNDnIFuah+IbfTY0Lm3P/EML12dZsSk2FiUoUWnI9VPh1aZ n6zKwftpb/Ipi0DEz2iBmeWfiLa/qXOgFDP8aABM7P1tHnW41luOVfHXyEEhoVDwH4 evOgoCcoRkd8fSqZKbbOLlm+pCJeQttJ0VUcIM0A4iZ+mVx4aJ6MFDOXrkfq7IGius wp4cueP2VSVRqTqTBQRv4fjzghAijzGae416vFEkymRbG3yrPOppQwR5KPqUH+Mj3i NHwXZ6s2SU2YpYttVJz4oq0VTo+co13CQRcQ1thQYXe5dGlElgzTDZIN2RII1MHFt0 fqgN0BGYY0keQ=="
143	"2021-09-25 14:19:55.859"	"Lookup record: k2._domainkey.mailchimpapp.net"
143	"2021-09-25 14:19:55.921"	"DKIM record: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8zbrSuBn2HCE6a3H24TOo8MNqOVfKan83iOnG7cvFmpKLb048VSG49QWbmOV7beOG22EVBUU7b3IpQ3nwYptI1kMllSmjpOOpCK+GxZGHOum3cPx65G/862R39MKHsnsZyHZh+7aWyjM78qDfHmDgFGppC3OZzmUId57WawpDHhpTi0+z1UUQ0K50fkiY+qRNjkBRqjsD058E12U97CBk8yD5bl78uARCszn2PVWoXTljmQ0DPkOU/fTxiVG3YBEUrtscEBqYnxxlAj1APkO3dr9wQLbsuZUAM+zBJ3EKnMEbaG2fX7QEz/mTknQqg6uJVu8YO6m8yExJV0cTBgrQIDAQAB;"
146	"2021-09-25 14:23:32.261"	"DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; t=1632572605; c=relaxed/simple; s=mailrelay; bh=HmHWzoAaD75I2ZbXZ5zzazM8FIqZnPXTRxtwIp/wDP8=; d=bijnavoornoppes.nl; h=Content-Transfer-Encoding:Content-Type:List-Unsubscribe:MIME-Version: Reply-To:From:Date:Message-ID:Subject:To; b=GZVjBoW3uXJXcfMsgeWDbbiB7v9IJs7FX0UjWSE4WA4o9yzdQCyK20dF/7gtjunUGFF030Zr 2CwwkkiDmvD7lVburkKYX8gQhlqGfqhE+/h3avGsGXdLV7vGX4xH2uS9DQ+rjyL9GCuleBsEGQ XWmTlvLeJZi+9B6ZUmYpn3MCk="
146	"2021-09-25 14:23:32.261"	"Lookup record: mailrelay._domainkey.bijnavoornoppes.nl"
146	"2021-09-25 14:23:32.402"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv9JA7rBYdPWqzlU0hrydKWA+JHT/2k3EclQ5yWUY3t+Ni1WKgh1nq69urNHHv5bRyq8iITHfq1CZfXMjPd1yeJ1xepzaK8nv+SY4aWApY/Zbwmc7Vwr4XKZXdJwp5UzVQU9EmTDPl/BaRCh0U7XHlOyN7noY7iNw6yCM94tOd0wIDAQAB;"
147	"2021-09-25 14:24:05.609"	"DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; t=1632572631; c=relaxed/simple; s=zero; bh=aOYwvgaSIBvjjG+Bjp8o8Zv0+uBrRA3npTFUctDojzM=; d=copernica.com; h=List-Unsubscribe:Feedback-ID:Subject:To:From:Message-ID:Date: MIME-Version:Content-Type; x=1635721200; b=YiJC82M4aVym87HmPWRqBXjIrGwW026dvcLcOntRR5B+GWW0PWyqMmnvy+eS+r/TcTUY6UGw Rf2xyzAjDpNkOCPVSWDt1kBFMgm6M6gS8xPb1hn8h2vSJrprHtDUdYm0N08eab3XTk4xVWEaXA sTqYmt2pHKjy1I4BHqNcJHzFE="
147	"2021-09-25 14:24:05.609"	"Lookup record: zero._domainkey.copernica.com"
147	"2021-09-25 14:24:05.640"	"DKIM record: v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3BezPLiu//zIbU3W8MX8kh8pK7WXRxzY03jDvXDathUIYZWdujewsgVotHm/q1cOmDYSjzMz1hueIj1u94gXO7TNPUlSrcZ4jmaIYqxFlT8y/pPtpVF85DGdYbUC/vRzA1i5moFYFphxJWIdJVaAi8OHh4B73YvGuR9jGTDP28wIDAQAB"
149	"2021-09-25 14:37:14.609"	"DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; s=mt; d=pmta.sailthru.com; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:List-Unsubscribe; bh=lljKfmjQH1nDQrAGFrEqbEdWTgQ=; b=Fr6b75jiln5eO44RoznCibuClRvXmjjk4jvkCWjMwp60/HMSSu5Zir5tbRC/MmOw+2btDV1kPpB2 VBE7q/iwGyGsLBlS9HbmeMfNh7HNBuVUuR9nzb9L1MPF5YtZCjJM3rqjbhrPm0ysI/ZTeYyA+hat SHfuxPfBODkiSqKMxrQ="
149	"2021-09-25 14:37:14.609"	"Lookup record: mt._domainkey.pmta.sailthru.com"
149	"2021-09-25 14:37:14.671"	"DKIM record: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCo0G4mLy5IpqzT/LkSA0dZcmEap3GqQhtwomzGEOhFwDHGpXZzCnzwLnFelCZtDRUZho6JI5XFTP2QoZO2+fdS3UcwqkOOj6zA3JlRq06PtGLGWnQKmJyb1AKjwbToKQIgIB4gF1XviY7QA9BBtIAT3t0ElpotTneg9hzLiWYwhwIDAQAB"
150	"2021-09-25 14:38:10.578"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vriendenloterij.nl; s=sim; x=1633178275; i=@email.vriendenloterij.nl; h=from:to:subject:date:reply-to: message-id:list-unsubscribe:list-unsubscribe-post:feedback-id: list-id:mime-version:content-type; bh=vTyBi4QmPBb3ksFLMi8FCD7GQl 0ldhj1wqcDWUjkZbU=; b=ZGEzdn76hOm+xcnbv4Kd5OOaD4kWS7d53dNhfDrflq I5jftODgV19ifWc/m1LAEAbNa7ajtxLGlKgzFmedQtp5Uq7pXA8+iJHrw/xUEPHF ffNCy270E5zzNx7LRO3nHo75Bbkz1muE6WFkTmCjWAz8axJaTi2okb3y13i+7Bq1 ziPjNDxe+xGYpHtJGRqTXqd1ngAfIJsFHgpbpr8wRm6jblDWIIv18UDquADDspmi +EPEAQ65I3WaL3S3xQLL+lQu0lyPxl3wQiYyXPn2HdaREX4xXVl7RQ3CDIz0KHEy Y82N1YfL60tp+QfJ0ZJduk54IVgM1beYENvVpngE7u3Q=="
150	"2021-09-25 14:38:10.578"	"Lookup record: sim._domainkey.vriendenloterij.nl"
150	"2021-09-25 14:38:10.656"	"DKIM record: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3zd6MG1wbah9N2R50UrlxrldzR9i/H7umCtKkCNxXmu/ORi5gSrXmaGmjQNDEvUev3ga/2Cg9f6euruXL6NwLK1zCaOBtz+gYchxMGgi+E0gW9rLBxix/1WKwscCdecl/ihefO0Y6afLiFR11sS3uAJpot6YyTdEj225/Y1qD4DFti+WSx4riZeh6PgW8kaVc4DUqo+Yqp2by9bW44P3WcgDrfeRc3aS1hyNacuy410m+bB2sheEZ84u6gwcjrUfc00rKLjGtd/HIC8YdYjrWkwdePIC3GaWI5M+oWwmoFy/vsnjCjgu1LaS8wVHUVprUdWnuhnpTU6qVNMWJFJoQIDAQAB"
151	"2021-09-25 14:41:57.660"	"DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; t=1632573703; c=relaxed/simple; s=zero; bh=IS1FEGVupNX7wjUVVfsPev1V0xjQEFWWB6YlDuOcoNw=; d=copernica.com; h=List-Unsubscribe:Feedback-ID:Subject:To:From:Message-ID:Date: MIME-Version:Content-Type; x=1635721200; b=eggJ0e6dBt4KpFLfw1uu3SB1H736pppFsfmLvgV6UN84usXPRmyUGnqeTRdRiicJJ2zbwjOj edabGzLq4S3o7PA1CWQ8I8Y9V2O/5x3kDdtZiYAX7Nnlt3G2uVAy/R2K8QdVBOZY8p2YsY7gk+ 6YaWXTraY/hkZ32rr6+DetouU="
151	"2021-09-25 14:41:57.660"	"Lookup record: zero._domainkey.copernica.com"
151	"2021-09-25 14:41:57.707"	"DKIM record: v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3BezPLiu//zIbU3W8MX8kh8pK7WXRxzY03jDvXDathUIYZWdujewsgVotHm/q1cOmDYSjzMz1hueIj1u94gXO7TNPUlSrcZ4jmaIYqxFlT8y/pPtpVF85DGdYbUC/vRzA1i5moFYFphxJWIdJVaAi8OHh4B73YvGuR9jGTDP28wIDAQAB"
152	"2021-09-25 15:06:43.828"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bol.com; s=bol_com; t=1632575195; bh=nNUMGjOLllXUDFZHjKhCFnC69UawWEanMLbWNvv8FXc=; h=Date:From:To:Subject; b=D0a9nbe6ZmRc9G5nfPv46brAN4IS2ndAgqT9ldVa27arftMWBkeYPc22l2IGNSzjm 8lVb+BwTy7qDvhGeGuYBPvmvnVXtWOuWNWmEK4QhdWa969svU9G+5BGR2FX55eKvZC grj+PDqZ5dW2SgTYmTWhiqdQVBqyYYBy6Ge2fDkg="
152	"2021-09-25 15:06:43.828"	"Lookup record: bol_com._domainkey.bol.com"
152	"2021-09-25 15:06:43.906"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNOdQ5QY6wGGTgurqXAEfXEf7vy0wCgHgT+EYW59hGPyaaWQSbXG0kQk20Gdkscoc4QAMH0TQP9ZKCpabsEehjmiFH8zY6MFkxXLVFUbNjL1INRCHtAGH7P6Sg4/2KGbjunuwKin6eg+EghYMlSX7Zg6yHBLZ1czdbRjzZSuLxiwIDAQAB"
155	"2021-09-25 15:21:29.718"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verkopen.bol.com; s=verkopen; t=1632576080; bh=9V5Id+4EmqDdRQJ6+QzdrRnv06dvLpMAKuPefv8BYZo=; h=Date:From:Subject:To; b=G6gqDjPGXWnkb71FGoo16bDuzzY+cxGPQQ9lBSDHwICRPIgdakAAeBznivDEmqyfy laJd7fWP7v/IHiBAjrvWRT9/ESEmDBJ3KwM6WioqZPAqRT4vt0DzTCxzJbFXaOkZF0 VfpfPaV0ZZTT3Ga4eEGJU6AN89gyJDsiDY8khYzY="
155	"2021-09-25 15:21:29.718"	"Lookup record: verkopen._domainkey.verkopen.bol.com"
155	"2021-09-25 15:21:29.796"	"DKIM record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHgPPaupaD3dYr5JMLCjM01EfjGbZLu6q4JasP/Kgf072A5npTzbf+mgH/fr2zeZqil8bbZWOPdo0i1GfIMLRuZT1AHv9SuO3h9480plFEtXUJjBsAXMkSl1J5kKdEEfDsVfhEctP9kQXI1hmesjGqp25+VAkNuuxIHjhOtwuFcwIDAQAB"
168	"2021-09-25 15:42:58.964"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marktplaats.nl; s=mail; t=1632577360; bh=ySCr3tgr0ztFFF4mc/7AzyKWAeLC42Se2iMEsESB24Y=; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:From; b=sJMAjeR5NFBlQzpnTT5G9Z9Toe+jyTzZoQHN9EChsQUOyWmXc6LCjn4chAR5Wafxu WrGWyeSzokG1XtUKo7uualWna58YWd0gptqgIihrIVUwXHOBCIIiLA1odZQgAHltXM EsLv3GWHuWcdXgjmCk5Lk+P9T6shqgbLjE7ssHZg="
168	"2021-09-25 15:42:58.964"	"Lookup record: mail._domainkey.marktplaats.nl"
168	"2021-09-25 15:42:59.011"	"DKIM record: v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDImegCFsjC3acFa6y72mSqdxoIPDkPtCQ4HVm5WafeXzARODGsP8jFLbcEfWvhMzf+WgNWv9rzc0vtCD2anI/ZMxhBRJgDGWcM1+/zFfKtr0uWGA8bocwbOpdRUD6jV0+QfF9sA88GcW7NVIIqTLD8ylDoQdUSWF9Jum1xqpsxiQIDAQAB"
169	"2021-09-25 15:49:22.585"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inboxify.net; s=mail; t=1632577580; bh=rfc9+QaZ8Csu5ldYyZnhp3t8mgMPhZvgkU9twoqow0k=; h=From:To:Subject:List-Unsubscribe:Reply-To:Date:From; b=bKdktXl00SZHmf5JJrbXO7bqEU1qUI8SHq+E7fjwq6GzUR+9Yl1eHiSaWYYKAZGKk UMMWJik0S+ifUSMvrR+Hjz6FvifFoeI7FlvD/32owfKq5kXGz7xZPmKcBbVg+kBwNV Sh69FLy/3yVjhH2D13xkIFd1iH5u/z1R0B/drYDA="
169	"2021-09-25 15:49:22.585"	"Lookup record: mail._domainkey.inboxify.net"
169	"2021-09-25 15:49:22.613"	"DKIM record: v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfL6BCotaD4DNhehnHfdE6PG5CrJkUtJ0FioZI/SVpqdzZDS68C9rxwbjK9/ui86/0fnDs2xExNJp3gsJW/lHVmA/Opn/2kBrmGwG6k1XKH9cg1eH252T2dCn7kvQvCdu49PcuZwH9f4jArQ4DKbUiFaPHzHg9AqLu/UVNSZOmmwIDAQAB;t=s"
170	"2021-09-25 15:50:14.046"	"DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=usp-onderzoek.nl; h=from:subject:content-type:mime-version:reply-to:to; s=s1; bh=f91Ol7I3b4195E9vgWLOFFfO5PBDXzWJbW6vMygJITM=; b=khD1po+yJbDJ93wQJCjIkqHx8JTWsF5dbU8Ijz1U2YaJzPUZrA8QdjSGN2RR10yLg6Mb VfK3CpSeRjxbTR3hDSh4xEu7EfRbDYXSwg/8LOdsuALyZnn7BfSbJccv/b1VM0RmgeCfL8 GpAynYsjb4SncN3exCFhhenBqJ23QjbiwmHwa7Wl2vFFY48sfvX6ltYbHsyiy+B0GBmkGt ysaBsR6l12KYivjEHbwt3ezx8dUvDEFb4eyQQDMNau3qvMRNu//ZkPs50P8dn9lgeBiiTy 633ssFuEPY7b7/QPlpe9bZvF0zO59mUq8Bzx+24rWe2ktV9G9tkIEJoTciG8G+CA=="
170	"2021-09-25 15:50:14.046"	"Lookup record: s1._domainkey.usp-onderzoek.nl"
170	"2021-09-25 15:50:14.078"	"DKIM record: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nXwjDVzq17WMEdHkEJdetv9xvnhfpV8ywTaYU3RDRu/MwrU8cNliqKjyZuU7wg04prWA3eUVOJjbKmpXerrbWTfeaYbvJ6RoryufRQmM7NyCwTNIyOpyJU6gdn4NqJYDRHieH5LXXX69eanCRTs7k7q1nHhvlY1LSVUTvEAwcGyNG68kEIB9Sb2lvBc5UpyrCYZ/3oLgINaw0YkpK2h73RN0nTxRuJBH7/A+jEVEOKMZYE5AMEe1FgK26ICBQRfRdBcRftkrMc/UUZTkzEAanNZCBFf1/chtAp+QbUkMmdp2qpd4zMlqJt4tD7w2uiRSf7xEej/hTxO55aFVSHFGwIDAQAB"
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

Post Reply