Re: removing private data from headers

2017-05-25 Thread Albrecht Dreß
Am 25.05.17 14:20 schrieb(en) spamv...@googlemail.com: since three days I'm trying to remove my internal and external IP from the Message header when I'm sending mails. But no solution has worked so far. What I did: created a new service in master.cf A simpler solution (working for me) for al

[OT] Postfix test image w/ GSSAPI?

2017-04-14 Thread Albrecht Dreß
Hi all, please excuse me for a rather ot question - I need an environment for testing GSSAPI Kerberos SASL authentication of a MUA to a MTA. I know postfix does support it, but setting up kerberos properly is a pita... Does anyone know about a pre-configured postfix (and maybe additionally do

Re: SV: How to restrict encrypted email

2016-07-17 Thread Albrecht Dreß
Am 16.07.16 21:30 schrieb(en) Sebastian Nielsen: You could use iptables to look for: "--BEGIN" "--END" "/signed" "/encrypted" "/pkcs7" "/pgp" Anywhere in the packet. In that case, you drop the connection, send a RST IMO this is too restrictive as it would produce false positives, e.g. for you

Re: How to restrict encrypted email

2016-07-16 Thread Albrecht Dreß
Am 16.07.16 15:59 schrieb(en) Michael Fox: So, are there other obvious ways to recognize encrypted contents, other than "Content-Type: multipart/encrypted"? Basically, you need to check for - OpenPGP/Inline (inspect every body, see rfc 2440, sect. 6.2) - OpenPGP/Mime (multipart/encrypted, see r

Re: Specific transport for sasl-authenticated mail?

2015-04-01 Thread Albrecht Dreß
Am 30.03.15 21:49 schrieb(en) Wietse Venema: b) Use check_sasl_access table that replies with "FILTER smtp:[host]:port". This requires Postfix 2.11 or later. Updated my Debian box from backports to 2.11 - and this method works just perfectly! Thanks a lot, Albrecht. pgpEa_vjFDJYE.pgp Descri

Specific transport for sasl-authenticated mail?

2015-03-30 Thread Albrecht Dreß
Hi all, the subject says it all - it is possible to use a specific transport for sasl-authenticated users, similar to sender_dependent_default_transport_maps, with postfix 2.9? The use case is to transmit all messages from sasl-authenticated senders only to a different machine where they shal

Re: how to hide data in body of every mail

2014-06-13 Thread Albrecht Dreß
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 13.06.14 21:16 schrieb(en) Wietse Venema: That requires a header_checks "ignore" action, with regular expression that contains your Postfix host in the place of *myhostname*, and wildcards in the place for *helo_name* and *client_name*, and some

Q: "indirectly" resolving LDAP groups

2014-05-23 Thread Albrecht Dreß
Hi all, I have a question about "indirectly" resolving posix group mail addresses to users through OpenLDAP. I use a setup where (inter alia) in OpenLDAP every user has a posixAccount and every group is a posixGroup. Every group has a mail address, and messages sent to the group shall be sen