On Apr 11, 2013, at 18:29, Noel Jones <njo...@megan.vbhcs.org> wrote:
>> so you must change to to smtp_header_checks > > smtp_header_checks are performed on outgoing mail during smtp(5) > delivery. > > But you're sort of on the right track. You can use > smtp_header_checks to remove the Received: headers from > authenticated mail before external delivery with something like: > /^Received: .*by myserver.example.com \(Postfix\) with ESMTPS?A > id.*$/ IGNORE > > Geoff, please note I've seen some overanxious anti-spam systems that > consider mail with no Received: headers as spam. In our case, the problem was with overzealous ones that filter on all Received: headers, and therefore block legitimate mail because the authenticated client is connecting from an access provider range listed by Spamhaus, or something similar. Our solution so far is to strip a few of the internal Received: headers, and 'REPLACE' the one that contains the connecting IP with a 'Received: by hostname.domain.tld (from authenticated client)' header. Since the submission hosts never send directly, it will always have at least three or four Received: headers when offered to the destination MX. Since the regular expression is fairly specific, this is done with 'header_checks' in our case. HTH, Jona
