pmg8 occasional false positive on dkim_invalid / kam_dkim_invalid

[agx]

I am occasionally seeing DKIM_INVALID in the spam headers added by SpamAssassin on messages, but when I download the message and evalute it using mxtoolbox's header analyser, the DKIM signature passes.

There is nothing obvious in the tracking center, are there any additional logs I can examine to determine what the issue might be?

I did have to tweak bind9 to fix frequent SERVFAIL responses, which had the effect of some DNS lookups taking longer to return on occasion. Could SpamAssassin be timing out before DNS returns a result?

Edit: seems to be occurring regularly on emails coming from Salesforce.

 

[Stoiko Ivanov]

hm - on a hunch - make sure your maxspamsize in the Spam Detector settings is as large as your max e-mail size:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_options_2
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_mailproxy_options

else SpamAssassin could see mails as truncated and thus get a wrong hash for the body.

 

[agx]

Oh my, those were radically different. I've updated MaxSpamSize. I will keep an eye on it and report back.