Hello everyone,

While running my milter, I noticed an inconsistency filtering incoming mail by 
their connection information and by inconsistency I mean complete lack of data. 
Of course it could be a bug in my milter, but in case it is not, here is the 
problem:

A normal (unencrypted) connection results in postfix providing me with the 
following macros:


    "macros": {
        "C": {
            "j": "my.server.tld",
            "_": "unknown [185.254.37.110]",
            "daemon_name": "my.server.tld"
        },
        "H": [],
        "M": [],
        "R": {
            "rcpt_addr": "m...@email.tld",
            "rcpt_host": "unix:private\/dovecot-lmtp",
            "rcpt_mailer": "lmtp"
        },
        "L": {
            "i": "40ADA4138A"
        },
        "E": {
            "i": "40ADA4138A"
        }
    },
    "connection": {
        "hostname": "[185.254.37.110]",
        "protocolFamily": "4",
        "port": 51673,
        "address": "185.254.37.110"
    },
    "helo": "citibanamex.com",


Notice how the "C" macro is populated and the "connection" (SMFIC_CONNECT) 
information is also fully populated. All normal so far.


But, the next email is different:


    "macros": {
        "H": {
            "tls_version": "TLSv1.2",
            "cipher": "ECDHE-ECDSA-AES256-GCM-SHA384",
            "cipher_bits": "256"
        },
        "M": [],
        "R": {
            "rcpt_addr": "m...@email.tld",
            "rcpt_host": "unix:private\/dovecot-lmtp",
            "rcpt_mailer": "lmtp"
        },
        "L": {
            "i": "4BFAF44FFA"
        },
        "E": {
            "i": "4BFAF44FFA"
        }
    },
    "connection": {
        "hostname": "",
        "protocolFamily": "",
        "port": 0,
        "address": ""
    },
    "helo": "fquznon.cn",


Now notice how the "C" macro is not sent and the "connection" (SMFIC_CONNECT) 
information is completely empty, but the TLS information "H" is now populated.

What causes postfix to not provide any connection information when the 
connection changed to encrypted?

I would appreciate some ideas.

Thank you.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to