{"id":8589,"date":"2016-01-26T08:30:13","date_gmt":"2016-01-26T16:30:13","guid":{"rendered":"http:\/\/crimeandtheforcesofevil.com\/blog\/?p=8589"},"modified":"2016-01-25T23:48:39","modified_gmt":"2016-01-26T07:48:39","slug":"debian-security-updates-broke-milter-greylist","status":"publish","type":"post","link":"https:\/\/crimeandtheforcesofevil.com\/blog\/2016\/01\/26\/debian-security-updates-broke-milter-greylist\/","title":{"rendered":"debian: security updates broke milter-greylist?"},"content":{"rendered":"<p>We&#8217;ve had to disable greylisting on our mail server, because ever since the latest round of security updates we loaded over the weekend, <i><b>every dkim-using host in the world fails key retrieval<\/b><\/i> at milter-greylist, and we don&#8217;t get mail from google or twitter or yahoo or much of anybody large anymore.<\/p>\n<p>And there&#8217;s no way to just disable dkim check in milter-greylist.<\/p>\n<p>Anybody have any idea what the <Em>fuck<\/em> might have happened? Searching online finds me exactly nothing. Here&#8217;s a sample &#8211; <Em>every<\/eM> transaction involving DKIM-signed mail fails, <Em>every<\/em> time, and it started at the weekend round of security patches:<\/p>\n<p><code>Jan 25 23:31:25 newmoon sm-mta[978]: u0Q7VOMi000978: from=&lt;ZZZZZZZZ@gmail.com&gt;, size=2334, class=0, nrcpts=1, msgid=&lt;CAAsYJfyDCB0w3uKXjie-uXF_Xskt524MuKU4=HHckYMkeDKZQg@mail.gmail.com&gt;, proto=ESMTP, daemon=MTA, relay=mail-pf0-f179.google.com [209.85.192.179]<br \/>\nJan 25 23:31:25 newmoon milter-greylist: DKIM failed: Key retrieval failed<br \/>\nJan 25 23:31:25 newmoon sm-mta[978]: u0Q7VOMi000978: Milter: data, reject=451 4.3.2 Please try again later<br \/>\nJan 25 23:31:25 newmoon sm-mta[978]: u0Q7VOMi000978: to=&lt;YYYYYYYY@murkworks.net&gt;, delay=00:00:00, pri=32334, stat=Please try again later<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We&#8217;ve had to disable greylisting on our mail server, because ever since the latest round of security updates we loaded over the weekend, every dkim-using host in the world fails key retrieval at milter-greylist, and we don&#8217;t get mail from google or twitter or yahoo or much of anybody large anymore. And there&#8217;s no way [&#038;hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-8589","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/8589","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/comments?post=8589"}],"version-history":[{"count":3,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/8589\/revisions"}],"predecessor-version":[{"id":8592,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/8589\/revisions\/8592"}],"wp:attachment":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/media?parent=8589"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/categories?post=8589"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/tags?post=8589"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}