On 2/5/25 12:29 AM, postfix--- via Postfix-users wrote:
I might have misunderstood the point of this as im jumping in late, but there is both `header_checks` and `smtp_header_checks`.

That seems very promising, I tried to put it into practice right now:

smtp inet n - n - - smtpd
  -o smtpd_tls_security_level=encrypt
  -o { header_checks=regexp:/etc/postfix/header_checks_incoming }
submission inet n - n - - smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_tls_auth_only=yes
  -o local_header_rewrite_clients=static:all
  -o { smtp_header_checks = pcre:{{/^Received:/ IGNORE}} }
-o { smtpd_recipient_restrictions=reject_unknown_sender_domain,reject_invalid_helo_hostname,reject_unknown_helo_hostname,permit_sasl_authenticated,permit_mynetworks,reject }
  -o smtpd_reject_unlisted_recipient=no
  -o smtpd_client_restrictions=
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_relay_restrictions=
  -o milter_macro_daemon_name=ORIGINATING

Sadly, this doesn't seem to work on my setup either. But it seems like a nice solution, if it can be made to work. :-O But a dedicated named toggle might also have benefits, like making it even easier to find.

Regards,

ell1e
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to