[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Matus UHLAR - fantomas via Postfix-users
I guess we are talking about your auth-user relay instance. We are indeed. I am not touching the other instances. If that one does not get mail via smtp on port 25, or only gets mail from authenticated users via that port, you can move configuration to main.cf. Indeed that is the case. T

[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Viktor Dukhovni via Postfix-users
On Thu, Aug 08, 2024 at 12:26:11PM +, Laura Smith via Postfix-users wrote: > I am open to the concept of anonymising but I don't know how since e.g. I do > not have readily defined subnets because the user-base includes roaming users. > > So clearly both the host name and the IP would need t

[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Laura Smith via Postfix-users
> I guess we are talking about your auth-user relay instance. We are indeed. I am not touching the other instances. > > If that one does not get mail via smtp on port 25, or only gets mail from > authenticated users via that port, you can move configuration to main.cf. Indeed that is the

[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Matus UHLAR - fantomas via Postfix-users
in such case, it should also not be added into "smtp" service, unless Laura (OP) uses different instance for incoming mail (or has more services in master.cf) On 08.08.24 08:43, Laura Smith via Postfix-users wrote: Basically a derived version of https://www.postfix.org/MULTI_INSTANCE_README.ht

[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Benny Pedersen via Postfix-users
Laura Smith via Postfix-users skrev den 2024-08-08 10:43: in such case, it should also not be added into "smtp" service, unless Laura (OP) uses different instance for incoming mail (or has more services in master.cf) Basically a derived version of https://www.postfix.org/MULTI_INSTANCE_READ

[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Laura Smith via Postfix-users
> in such case, it should also not be added into "smtp" service, unless Laura > (OP) uses different instance for incoming mail (or has more services in > master.cf) > Basically a derived version of https://www.postfix.org/MULTI_INSTANCE_README.html I have : - Null instance - Inbound instan

[pfx] Re: postfix cleanup_service question

2024-08-08 Thread Matus UHLAR - fantomas via Postfix-users
On Wed, Aug 07, 2024 at 10:43:47AM +, Laura Smith via Postfix-users wrote: Reading the docs, maybe I'm just over-complicating things. Perhaps I should just remove the stuff from master.cf and do : header_checks=regexp:/etc/postfix-myrelay/header_checks In main.cf instead ? On 07.08.24 21

[pfx] Re: postfix cleanup_service question

2024-08-07 Thread Viktor Dukhovni via Postfix-users
On Wed, Aug 07, 2024 at 10:43:47AM +, Laura Smith via Postfix-users wrote: > > Try: > > > > postmulti -i postfix-myrelay -x postconf -P '*/unix/header_checks' > > Will try that and let you know. It won't take long. :-) > Reading the docs, maybe I'm just over-complicating things. > > Perha

[pfx] Re: postfix cleanup_service question

2024-08-07 Thread Laura Smith via Postfix-users
Sent with Proton Mail secure email. On Wednesday, 7 August 2024 at 11:20, Viktor Dukhovni via Postfix-users wrote: > On Wed, Aug 07, 2024 at 09:29:35AM +, Laura Smith via Postfix-users wrote: > > > > You may want to check that with > > > > > > postmulti -i postfix-myrelay -x postcon

[pfx] Re: postfix cleanup_service question

2024-08-07 Thread Viktor Dukhovni via Postfix-users
On Wed, Aug 07, 2024 at 09:29:35AM +, Laura Smith via Postfix-users wrote: > > You may want to check that with > > > > postmulti -i postfix-myrelay -x postconf -P header_checks > > > > I get: > > postconf: warning: unmatched request: "header_checks" Try: postmulti -i postfix-myrelay

[pfx] Re: postfix cleanup_service question

2024-08-07 Thread Laura Smith via Postfix-users
> > 3/ Referenced it under > > submissions inet n - y - - smtpd > > submission inet n - y - - smtpd > > smtp inet n - y - - smtpd > > > > using the same options setting for all three: > > -o cleanup_service_name=myheadercleanup > > > You may want to check that with > > postmulti -i postfix-my

[pfx] Re: postfix cleanup_service question

2024-08-06 Thread Viktor Dukhovni via Postfix-users
On Wed, Aug 07, 2024 at 08:18:24AM +0200, Bastian Blank via Postfix-users wrote: > On Wed, Aug 07, 2024 at 12:46:41PM +1000, Viktor Dukhovni via Postfix-users > wrote: > > Indeed, but I would also recommend to not entirely delete the Received > > headers, rather censor just the IP address or other

[pfx] Re: postfix cleanup_service question

2024-08-06 Thread Bastian Blank via Postfix-users
On Wed, Aug 07, 2024 at 12:46:41PM +1000, Viktor Dukhovni via Postfix-users wrote: > Indeed, but I would also recommend to not entirely delete the Received > headers, rather censor just the IP address or other "private" fields. > Some receiving MTAs treat absence of origin Received headers as a si

[pfx] Re: postfix cleanup_service question

2024-08-06 Thread Viktor Dukhovni via Postfix-users
On Tue, Aug 06, 2024 at 05:45:59PM -0400, Wietse Venema via Postfix-users wrote: > Laura Smith via Postfix-users: > [...] > > Here's what I've done: > > > > 1/ Create header_checks file with the following: > > /^Received:/ IGNORE > > /^User-Agent:/ IGNORE > > /^X-Mailer:/ IGNORE > > /^X-User-Agent

[pfx] Re: postfix cleanup_service question

2024-08-06 Thread Wietse Venema via Postfix-users
Laura Smith via Postfix-users: > I am running an instance of Postfix that is an authenticated relay. > > Overall it is working great except user IPs are leaking through Received > headers. > > I thought I configured it right, but obviously not. > > Here's what I've done: > > 1/ Create header_c