On 15 Sep 2020, at 14:39, Fourhundred Thecat wrote:

On 2020-09-15 10:18, Nick wrote:
On 2020-09-15 08:53 BST, Fourhundred Thecat wrote:
yes, I am accepting authenticated senders on port 465, and port 25 is
only for unauthenticated.

But how do I ensure that header_checks only apply to port 25 ?

<http://www.postfix.org/BUILTIN_FILTER_README.html#mx_submission>

thank you, but somehow I cannot make it work.

My header checks work fine when I have it in main.cf (globally)

  header_checks = regexp:/var/local/postfix/maps/header_checks

But when I remove it from main.cf and add last line to master.cf:

smtp      inet      n       -       n       -        -       smtpd
  -o smtpd_tls_security_level=may
  -o smtpd_sasl_auth_enable=no
  -o syslog_name=postfix:25
  -o header_checks=regexp:/var/local/postfix/maps/header_checks

then it does not work.

That is NOT what the cited example in BUILTIN_FILTER_README says to do. The above provides a header_checks directive to the smtp service, which runs the "smtpd" component of Postfix and does not use that directive.

The header_checks directive is used by the "cleanup" component of Postfix, so if you need to use different header_checks for message submission than for inbound transport, you need to define an alternative cleanup service and use the cleanup_service_name directive to tell the smtpd services (typically named smtp, smtps, and submission) which one to use. The example in BUILTIN_FILTER_README names that msa_cleanup and uses that for the smtps and submission services, leaving the standard cleanup & its header_checks for the port 25 smtp service.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)

Reply via email to