When mails from different providers got rejected due to invalid DKIM, it could be as well a DNS issue. Because DKIM depends on DNS working. Glad to hear that updating worked, but DKIM is working within the mailcow setup when everything is correctly set up - we would have noticed, when there would be a general issue way sooner.
Just to clarify: The rebalancing does indeed changing the weights for each rspamd symbol, but it’s not changing how DKIM works or what is classified as “rejected”.
In other words: If DKIM is wrong and gets negatively scored, it still get’s negatively scored - but just less. So the “is wrong” is now “is less wrong”. You can check the commit yourself: mailcow/mailcow-dockerized@
fa153fa. “R_DKIM_REJECT” was increased from score of 10 to 8.
So two possibilities:
- The email just get less negatively scored (below the reject threshold).
- The restart fixed something, and not the changes itself.