Sturgis, Grant a écrit : > On Mon, 2008-11-24 at 17:26 -0700, Wietse Venema wrote: >> Sturgis, Grant: >>> Hey all, >>> >>> I'm trying to hide our internal mail servers from the message >> headers of >>> outbound email. I've done some reading about this and have found >> two >>> solutions: >>> 2. Use header_checks like this >>> http://www.nabble.com/Hide-internal-address-(Postfix)-td2300995.html >> This removes Received: message headers, without changing email >> addresses. >> >> Wietse > > Many thanks. So I added this: > > /^received: / IGNORE > /^X-Sender: / IGNORE
don't do that. only remove selected headers. make your expressions as precise as possible. only remove the headers that contain infos about internal hosts. and it may be better to use REPLACE so that the infos are modified, such as replacing 192.168.1.x by 10.3.6.x... etc. and if you are worried about someone being able to retrieve the original IP, then use an expression for each internal server. > > as a header_check and tested by sending a mail to hotmail.com. It never > arrived, so I'm guessing they are dropping the message? If I comment > out those lines and reload postgres it works fine. > s/postgres/postfix ;-p I guess many spam filters won't like seeing a message without "relay" received headers. if it's this, then you may need to use REPLACE instead of IGNORE. > So, is this the best way to "hide internal mail servers"? > well, if you modify the message, you may trigger spam rules that try to detect forged mail... so caution is needed here. it is easier to let the internal headers get out...
