Abhijith PA writes:
I am seeing dkim fail in mail that people send to lists /dkim=fail reason="signature verification failed"/
It sounds like you mean at the final destination. This is expected if Mailman alters the portions of the message that are signed. This depends on the configuration of DKIM at the message sending MTA, but typically is triggered if
- Mailman adds a header or footer
- Mailman adds a list tag or post serial number to Subject
- Mailman alters From to avoid DMARC problems.
If you're sure it is new and Mailman is configured to do none of the above, it's not a Mailman problem.
but it is not happening when the list solely sending mail to subscribers (like digest, or subscribe/unsubscribe messages etc).
Mailman has nothing to do with DKIM in this case. It's all handled by the MTA after Mailman passes the mail to it.
I recently added a new domain to the mailman3. After this I started noticing this issue. Any help ?
This could happen if the new domain does not have DKIM configured correctly in the DNS or the MTA. If it is new, this is not a Mailman problem based on your description.
If you stil think it's a Mailman problem, we need more information. A complete copy of the headers of a message that failed DKIM is the minimum. You MUST preserve the addresses. If it bothers you to send such information to a public list (this one), you can send it to me, Mark, or Abhilash personally. (You can get their addresses from past mails to this list.)
Regards, Steve