Viewing entries tagged with 'dkim'

CISCO breaks DKIM on their ASA/PIX (again)

Posted by Ralf Hildebrandt on 8 December 2011 | 0 Comments

Tags: , , ,

 

site which was using Postfix and a CISCO ASA with "smtp protocol
fixup" enabled.
I was able to work around the delivery problems by stripping the DKIM
headers on outgoing mails (as so often).
Some interesting info got out:
I've also discussed these results with local Cisco support and they
confirmed it's a known bug (not published) with DKIM and smtp inspection
engine in latest IOS versions.
This should be fixed in some newer IOS version (8.4(10)) which is not
public yet (latest is 8.4(2)).

Over the last few days I discussed SMTP delivery problems with a czech site which was using Postfix and a CISCO ASA with "smtp protocol fixup" enabled.

0 comments | Read the full post

Working around broken CISCO/PIX or ASA installations

Posted by Ralf Hildebrandt on 20 June 2011 | 0 Comments

Tags: , , ,

CISCOS's firewalls, predominantly the PIX and ASA have a feature called "smtp protocol fixup".

0 comments | Read the full post