>Nick Tait:
>> Anyway it turned out to be fairly simple to get Postfix to add the
>> missing Message-ID header: I just needed the email to satisfy
>> "local_header_rewrite_clients".

  On 12.10.22 09:41, Wietse Venema wrote:
>This will break valid DKIM signatures when you change the setting
>to match arbitrary senders.

Matus UHLAR - fantomas:
only if the sender generates DKIM signature, which is unlikely for clients
that don't generate message-id.

On 12.10.22 10:41, Wietse Venema wrote:
This would break signatures from REMOTE MTAs.

the OP's example configured local_header_rewrite_clients only on submission port.

of course, setting it by default in main.cf would cause problems.

if really needed, setting local_header_rewrite_clients on submission or
smtps(submissions) ports should be safe as SMTP authentication is required
on those portz.

There is no need for that, just do in main.cf:

local_header_rewrite_clients = permit_mynetworks, permit_sasl_authenticated

Why it isn't the default I cannot remember.

which is why I haven't recommended it :-)

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Honk if you love peace and quiet.

Reply via email to