Noel Jones:
> On 6/9/2020 8:46 PM, PGNet Dev wrote:
> > does dnsblog have a log map/filter/somesuch?
> >
> > or does the capability exist elsewhere in postfix?
> >
> > currently, with spamhaus dqs in the rbl/dnsbl mix, dnsblog spits out, e.g.
> >
> > /var/log/postfix/postfix.log:Jun 9 13:27:56 ms postfix/dnsblog[5378]:
> > addr 72.43.215.122 listed by domain <ACCTID>.zen.dq.spamhaus.net as
> > 127.0.0.4
> >
> > i send logs to a central log server, & simply want to anonymize -- i.e.,
> > remove/obfuscate the <ACCTID> -- from the logs.
> >
> > it can be done externally to postfix; within postfix config (map?), would
> > be nice.
> >
> >
>
>
> Postfix assumes the logs are private. To sanitize the log, you'll
> need to use an external process or patch the source.
Confirmed. Postfix avoids disclosing internal information SMTP
replies, but the logs are private and will contain information that
is needed for troubleshooting. This will not change.
Wietse
> Postfix has default_rbl_reply and rbl_reply_maps to sanitize what is
> sent to the offending client, but does not modify what's logged.
> Hopefully you're using this already...
>
>
> -- Noel Jones
>
