Re: submission configuration and RFC 6409

2022-10-13 Thread Wietse Venema
Nick Tait: > On 13/10/2022 8:04 am, Geert Hendrickx wrote: > > "permit_mynetworks" has the (documented) drawback that remote mail forwarded > > by a neighbouring system can still be rewritten (and thus break signatures). > > > > My personal preference is permit_inet_interfaces, permit_sasl_authenti

Re: submission configuration and RFC 6409

2022-10-12 Thread Nick Tait
On 13/10/2022 8:04 am, Geert Hendrickx wrote: The HISTORY file says it is: 20041014-23 Postfix still appends $@myorigin or .$mydomain to headers from the Postfix sendmail command, or from clients listed with the new local_header_rewrite_clients parameter (default:

Re: submission configuration and RFC 6409

2022-10-12 Thread Geert Hendrickx
On Wed, Oct 12, 2022 at 10:41:36 -0400, Wietse Venema wrote: > local_header_rewrite_clients = permit_mynetworks, permit_sasl_authenticated > > Why it isn't the default I cannot remember. The HISTORY file says it is: > 20041014-23 > > Postfix still appends $@myorigin or .$mydomain to hea

Re: submission configuration and RFC 6409

2022-10-12 Thread Viktor Dukhovni
On Thu, Oct 13, 2022 at 01:07:43AM +1300, Nick Tait wrote: > And so I ended up removing the option from > main.cf and including "-o local_header_rewrite_clients=static:all" in > master.cf instead: > > submission inet n   -   y   -   -   smtpd >   -o syslog_name=post

Re: submission configuration and RFC 6409

2022-10-12 Thread Matus UHLAR - fantomas
>Nick Tait: >> Anyway it turned out to be fairly simple to get Postfix to add the >> missing Message-ID header: I just needed the email to satisfy >> "local_header_rewrite_clients". On 12.10.22 09:41, Wietse Venema wrote: >This will break valid DKIM signatures when you change the setting >to

Re: submission configuration and RFC 6409

2022-10-12 Thread Wietse Venema
Matus UHLAR - fantomas: > >Nick Tait: > >> A couple of months ago an email I sent from my phone was bounced by the > >> recipient's SMTP server because the email had no Message-ID header. It > >> turns out the email app that I've been using on my phone for years > >> doesn't generate a Message-ID,

Re: submission configuration and RFC 6409

2022-10-12 Thread Matus UHLAR - fantomas
Nick Tait: A couple of months ago an email I sent from my phone was bounced by the recipient's SMTP server because the email had no Message-ID header. It turns out the email app that I've been using on my phone for years doesn't generate a Message-ID, but this was the first time that this had bee

Re: submission configuration and RFC 6409

2022-10-12 Thread Wietse Venema
Nick Tait: > Hi list. > > A couple of months ago an email I sent from my phone was bounced by the > recipient's SMTP server because the email had no Message-ID header. It > turns out the email app that I've been using on my phone for years > doesn't generate a Message-ID, but this was the first

submission configuration and RFC 6409

2022-10-12 Thread Nick Tait
Hi list. A couple of months ago an email I sent from my phone was bounced by the recipient's SMTP server because the email had no Message-ID header. It turns out the email app that I've been using on my phone for years doesn't generate a Message-ID, but this was the first time that this had b