On Sun, Nov 30, 2008 at 12:18:45PM -0500, john mickler wrote: > /^(Received): (.*?)(\n[\t\x20])(.*)$/ REPLACE ${1}: from smtp-auth > (smtp-auth.mycompany.com [55.55.55.55]${3}${4} > > > resulting replaced header- > > Received: from smtp-auth (smtp-auth.mycompany.com [55.55.55.55] > (using TLSv1 with cipher AES128-SHA (128/128 bits)) > (No client certificate requested) > (Authenticated sender: [EMAIL PROTECTED]) > by smtp.mycompany.com (Postfix) with ESMTPSA id EA8E9B879 > for <[EMAIL PROTECTED]>; Sun, 30 Nov 2008 11:58:51 -0500 (EST)
I would recommend an RFC1918 address, e.g. 10.0.0.1. You could even include the first 3 octets of the real IP as the last 3 octets of the 10/8 address. That way, you don't lose all information, although of course the full addresss is still in your logs for the queue-id in question. -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:[EMAIL PROTECTED]> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.