Quoting Mark Goodge <m...@good-stuff.co.uk>:
EASY steve.h...@digitalcertainty.co.uk wrote:
It's a bug. Read the original question carefully. If I'm pasting the
original headers into the BODY of a fresh mail, and the header filters
are *blocking* it - is that intended behaviour? Answer (hopefully) 'No'.
If the header-only filters are blocking on the body content, then
yes, that would be a bug. But that isn't what you said in your
original question, which was whether this is true:
"You cannot whitelist a sender or client in an access list to bypass
header or body checks. Header and body checks take place whether you
explicitly "OK" a client or sender, in access lists, or not."
That's a question about whether it's possible to override header or
body checks by whitelisting. And the answer to that is "no". I agree
that's not necessarily desirable behaviour, but there are reasons
why it's done that way and it's certainly not a bug.
If you meant to ask "Do header checks apply to body content as
well?" then that's a different question. If the answer to that is
"yes" then I would be very surprised, since the documentation[1]
clearly indicates that these are applied separately. If
header_checks are (or appear to be) blocking messages where the
offending headers are pasted into the body of a message, then either
you have misconfigured your server or you have found a real bug. If
the latter, then you ought to be able to demonstrate it with a
combination of mail logs, sample messages and the output of postconf
-n.
[1] http://www.postfix.org/header_checks.5.html
Mark
Then again, the OP may be running up against:
http://www.postfix.org/postconf.5.html#nested_header_checks
nested_header_checks is set to the same as header_checks by default. I
didn't recall seeing any logs or config from the OP, so this is pure
speculation.
