Re: address rewriting for remote clients

2009-12-24 Thread Christoph Anton Mitterer
Quoting Noel Jones : To insure that local users aren't confused by a HEADER that looks as if it came from the local domain, I use remote_header_rewrite_domain = domain.invalid Ah and by the way: This does not help if the remote user specifies a fully qualified address (e.g. r...@host.domain),

Re: address rewriting for remote clients

2009-12-24 Thread Christoph Anton Mitterer
Hi Noel! Quoting Noel Jones : Of course I understand that mail does not guarantee sender authenticity but this is still a security problem, isn't it? I mean it's easily possible to reject reject_non_fqdn_sender and I think even envelope sender addresses that match any of the canonical domains,..

Re: address rewriting for remote clients

2009-12-23 Thread Noel Jones
On 12/23/2009 7:30 PM, Christoph Anton Mitterer wrote: Hi. btw: Thanks for your efforts in answering my questions, and sorry for posting to -devel before (did not notice in the beginning, that this is not meant for bug/feature reports). Quoting Wietse Venema : clients (depending on local_heade

Re: address rewriting for remote clients

2009-12-23 Thread Christoph Anton Mitterer
Hi. btw: Thanks for your efforts in answering my questions, and sorry for posting to -devel before (did not notice in the beginning, that this is not meant for bug/feature reports). Quoting Wietse Venema : clients (depending on local_header_rewrite_clients) and for remote clients only if r

Re: address rewriting for remote clients

2009-12-23 Thread Wietse Venema
Christoph Anton Mitterer: > - Header sender and recipient addresses are always rewritten for local > clients (depending on local_header_rewrite_clients) and for remote > clients only if remote_header_rewrite_domain is not empty. Indeed. The feature is called HEADER rewriting. This is called tr

Re: address rewriting for remote clients

2009-12-23 Thread Christoph Anton Mitterer
Hi list. Sorry for asking questions again ;) Quoting Wietse Venema : As far as I understood the documentation, if those two are at their default: local_header_rewrite_clients = permit_inet_interfaces remote_header_rewrite_domain = local clients are subject to address rewriting, but remote ones

Re: address rewriting for remote clients

2009-12-23 Thread Wietse Venema
Christoph Anton Mitterer: > Hi. > > As far as I understood the documentation, if those two are at their default: > local_header_rewrite_clients = permit_inet_interfaces > remote_header_rewrite_domain = > local clients are subject to address rewriting, but remote ones are not. Please pay attention

address rewriting for remote clients

2009-12-23 Thread Christoph Anton Mitterer
Hi. As far as I understood the documentation, if those two are at their default: local_header_rewrite_clients = permit_inet_interfaces remote_header_rewrite_domain = local clients are subject to address rewriting, but remote ones are not. Unfortunately it seems that my postfix (2.6.5 from Debian