[linux] Postfix a maskovanie realneho odosielatela mailu

Matus UHLAR - fantomas uhlar na fantomas.sk
Středa Červenec 11 11:26:51 CEST 2007


On 11.07.07 11:15, Ing. Jan ONDREJ wrote:
>   mozes skusit pridat toto:
> 
> smtpd_sasl_authenticated_header = yes
> 
> To ti to hlavicky spravy prihodi informaciu, aky user sa prihlasil.
> SpamAssassin to vie vyuzit, ale neviem ci na to pozera aj ten dalsi
> (mne robil problem moj vlastny spamassassin).

podla toho co som cital v dokumentacii spamasassinu je toto velka slabina
postfixu:

http://wiki.apache.org/spamassassin/DynablockIssues

I'm an ISP, and mails from our customers, using authenticated connections
from another ISP, are hitting RCVD_IN_DYNABLOCK.

This problem (involving SMTP Auth connections from dynamic addresses) is
similar to other "false positives" such as SPF_FAIL RCVD_IN_SORBS_DUL and
various other RBL problems.

Note: The problem described was fixed in version 3.0.2. However, some MTAs
such Postfix don't support RFC 3848 and will therefore still exhibit the
described problem since SpamAssassin won't be able to automatically trust
authenticated users if the MTA doesn't leave a supported authentication
token in the relay's Received header.

Update (2006-07-14): Postfix 2.3 includes support for adding its own style
of authentication info to its received headers by setting
smtpd_sasl_authenticated_header = yes, which is disabled by default, in your
Postfix config. SpamAssassin 3.1.4 and later includes support for this
Postfix auth info. 


> Popripade este toto by mohlo byt to co chces, ale nikdy som to nepouzival:
> 
>   http://www.postfix.org/rewrite.html#masquerade

nie, toto prepisuje domenu odosielatela.
Hlavicku Received: z toho mailu pokial viem nevyhodi ziadna direktiva
postfixu, jedine ze by to robil

-- 
Matus UHLAR - fantomas, uhlar na fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Microsoft dick is soft to do no harm



Další informace o konferenci linux