[exim] Completely remove any name in From: header for inbound email?

2023-05-26 Thread Sebastian Arcus via Exim-users
Hello. As so many scams around are based on impersonating someone inside the company, I am wondering if anyone here has considered the more extreme solution of completely removing any name in the From: header for incoming emails? I already have SPF/DKIM/DMARC in place, so the scammers can't act

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Jeremy Harris via Exim-users
On 26/05/2023 10:20, Sebastian Arcus via Exim-users wrote: strip all names in the From: field altogether and just leave the email address? Can Exim do that Yes. A simple (hah!) matter of remove-header, suitable regex, and add-header. -- Cheers, Jeremy -- ## subscription configuration (req

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Markus Reschke via Exim-users
Hello Sebastian! On Fri, 26 May 2023, Sebastian Arcus via Exim-users wrote: Hello. As so many scams around are based on impersonating someone inside the company, I am wondering if anyone here has considered the more extreme solution of completely removing any name in the From: header for incom

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 10:05:16 UTC používateľ Jeremy Harris via Exim-users napísal: >A simple (hah!) matter of remove-header, suitable regex, and add-header. Even more simple, instead of regex, just extract ${address:...} and use that to replace header, in case of single address... regards -- S

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Slavko via Exim-users wrote on 26.05.2023 19:40: > Dňa 26. mája 2023 10:05:16 UTC používateľ Jeremy Harris via Exim-users > napísal: > >> A simple (hah!) matter of remove-header, suitable regex, and add-header. > > Even more simple, instead of regex, just extract ${address:...} > and use that t

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Jeremy Harris via Exim-users
On 26/05/2023 18:28, Victor Ustugov via Exim-users wrote: Please show me how you are going to extract the address without the regular expression from the header shown above. Why without? Using ${addresses: } does seem to work ok for this example: /considering: ${addresses:=?utf-8?Q?My=20Bizn

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 17:50:14 UTC používateľ Jeremy Harris via Exim-users napísal: >Why without? Using ${addresses: } does seem to work ok >for this example: Jeremy, please, i check docs for ${address:...} now, in it states RFC 2822 parsing. I don't know how to ask properly in English. But RFC 28

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Jeremy Harris via Exim-users wrote on 26.05.2023 20:50: > On 26/05/2023 18:28, Victor Ustugov via Exim-users wrote: >> Please show me how you are going to extract the address without the >> regular expression from the header shown above. > > Why without?  Using ${addresses: } does seem to work ok

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Victor Ustugov via Exim-users wrote on 26.05.2023 22:44: > Jeremy Harris via Exim-users wrote on 26.05.2023 20:50: >> On 26/05/2023 18:28, Victor Ustugov via Exim-users wrote: >>> Please show me how you are going to extract the address without the >>> regular expression from the header shown above.

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Victor Ustugov via Exim-users wrote on 26.05.2023 20:28: > Slavko via Exim-users wrote on 26.05.2023 19:40: >> Dňa 26. mája 2023 10:05:16 UTC používateľ Jeremy Harris via Exim-users >> napísal: >> >>> A simple (hah!) matter of remove-header, suitable regex, and add-header. >> >> Even more simple,

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 17:28:41 UTC používateľ Victor Ustugov via Exim-users napísal: >Please show me how you are going to extract the address without the >regular expression from the header shown above. Just curious, can you share your regex for address extracting? regards -- Slavko https://www

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Jeremy Harris via Exim-users
On 26/05/2023 20:32, Slavko via Exim-users wrote: Jeremy, please, i check docs for ${address:...} now, in it states RFC 2822 parsing. I don't know how to ask properly in English. But RFC 2822 was replaced by RFC 5322, and beside that, address string was updated by MIME encoded-words (i have not R

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Bill Cole via Exim-users
On 2023-05-26 at 16:41:44 UTC-0400 (Fri, 26 May 2023 21:41:44 +0100) Jeremy Harris via Exim-users is rumored to have said: On 26/05/2023 20:32, Slavko via Exim-users wrote: Jeremy, please, i check docs for ${address:...} now, in it states RFC 2822 parsing. I don't know how to ask properly in E

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 20:41:44 UTC používateľ Jeremy Harris via Exim-users napísal: >As I read it, 5322 defines display-name as "phrase" >and then helpfully does not define *that*. Phrase is defined in 3.2.5 section as one or more words, and as word is atom or quoted-string, phrase is one or more

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 17:28:41 UTC používateľ Victor Ustugov via Exim-users napísal: >I posted example to this list five weeks ago: > >From: =?utf-8?Q?My=20Bizness:=20Inc.?= > >I know that comma must be encoded. Also I know that MUAs correctly >display such headers. All MUAs? Your MUAs? My MUA s

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Slavko via Exim-users wrote on 27.05.2023 00:42: > Dňa 26. mája 2023 17:28:41 UTC používateľ Victor Ustugov via Exim-users > napísal: > >> I posted example to this list five weeks ago: >> >> From: =?utf-8?Q?My=20Bizness:=20Inc.?= >> >> I know that comma must be encoded. Also I know that MUAs co

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Slavko via Exim-users wrote on 26.05.2023 23:32: > Dňa 26. mája 2023 17:28:41 UTC používateľ Victor Ustugov via Exim-users > napísal: > >> Please show me how you are going to extract the address without the >> regular expression from the header shown above. > > Just curious, can you share your

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 22:04:42 UTC používateľ Victor Ustugov via Exim-users napísal: >Or was your question about MTA features for your personal use only? No, that was rhetorical questions ;-) >It would be nice if everyone used your MUA or my MUA. But that doesn't >happen in real life. I would cons

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Slavko via Exim-users
Dňa 26. mája 2023 22:31:56 UTC používateľ Victor Ustugov via Exim-users napísal: > >${if >eq{${address:$rh_From:}}{}{${sg{$rh_From:}{\N^.*<(\S+?@\S+?)>\s*\N}{\$1}}}{${address:$rh_From:}}} > Thanks, but do you know that is not perfect too? Eg. try add "(comment)" after address and will match inv

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Victor Ustugov via Exim-users
Slavko via Exim-users wrote on 27.05.2023 02:19: > Dňa 26. mája 2023 22:04:42 UTC používateľ Victor Ustugov via Exim-users > napísal: > >> Or was your question about MTA features for your personal use only? > > No, that was rhetorical questions ;-) > >> It would be nice if everyone used your M

[exim] Re: Show regex capture group in logs?

2023-05-26 Thread Jasen Betts via Exim-users
On 2023-05-16, MRob via Exim-users wrote: > Hi, I want to capture part of a regex match (capture group) to put in > logs. This example using subject header works but is there a better way? > > warn set acl_c_temp = ${if match{$h_Subject:}{ group>}{$1}{none}} > !condition = ${if eq{$acl_c_te

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Ian Z via Exim-users
On Fri, May 26, 2023 at 10:20:32AM +0100, Sebastian Arcus via Exim-users wrote: .. snip .. > next step would be to just strip all names in the From: field altogether and > just leave the email address? Can Exim do that, and has anyone considered > it? This is the kind of transform I prefer to do