limit rewriting headers in canonical_maps

2022-05-24 Thread Matus UHLAR - fantomas
Hello, for SRS testing I set up rewriting of e-mail headers in outgoing e-mail: sender_canonical_maps=tcp:localhost:10001 sender_canonical_classes=envelope_sender,header_sender remote_header_rewrite_domain=fantomas.sk hoping that From: with foreign domain will be rewriten to SRS form. Unfortun

Re: Milter_Readme - Documentation Edit Request - "order", "reject" and "override" - multiple message modifications?

2022-05-24 Thread Matus UHLAR - fantomas
On 5/23/22 13:51, post...@ptld.com wrote: Rejects a command is if something in that milter returns a reject response code like 4xx or 5xx. If dkim runs first before dmarc, and dkim issues a 5xx reject causing the email to be rejected by postfix, then that's it, ... On 23.05.22 19:31, James F

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Wietse Venema
Hmm... I thought that SPF (and by implication SRS) are concerned with ENVELOPE addresses? If you are trying to rewrite RETURN-PATH then that is pointless. That header is added upon delivery, with content based on the envelope sender. If you must rewrite an arbitrary subset of headers, then I recom

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Viktor Dukhovni
> On 24 May 2022, at 5:24 am, Matus UHLAR - fantomas wrote: > > for SRS testing I set up rewriting of e-mail headers in outgoing e-mail: > > sender_canonical_maps=tcp:localhost:10001 > sender_canonical_classes=envelope_sender,header_sender > remote_header_rewrite_domain=fantomas.sk > > hoping t

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Matus UHLAR - fantomas
On 24.05.22 06:38, Wietse Venema wrote: Hmm... I thought that SPF (and by implication SRS) are concerned with ENVELOPE addresses? originally, yes. I have customer where incoming messages have the "message was received from external source" banned added. The resulting messages don't have valid

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Viktor Dukhovni
> On 24 May 2022, at 8:09 am, Matus UHLAR - fantomas wrote: > > I have customer where incoming messages have the > "message was received from external source" > banned added. > > The resulting messages don't have valid DKIM-signature: (or none at all), and > the only way to forward without prob

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Bill Cole
On 2022-05-24 at 08:16:12 UTC-0400 (Tue, 24 May 2022 08:16:12 -0400) Viktor Dukhovni is rumored to have said: On 24 May 2022, at 8:09 am, Matus UHLAR - fantomas wrote: I have customer where incoming messages have the "message was received from external source" banned added. The resulting me

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Matus UHLAR - fantomas
On 24 May 2022, at 8:09 am, Matus UHLAR - fantomas wrote: I have customer where incoming messages have the "message was received from external source" banned added. The resulting messages don't have valid DKIM-signature: (or none at all), and the only way to forward without problems is either

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Wietse Venema
Matus UHLAR - fantomas: > If there's no way to do this now, I'll have to search for one. There is a way to do this, and that involves using a Milter (or any kind of content filter). Postfix does not implement every possible edge case. Wietse

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread James Feeney
On 5/24/22 06:09, Matus UHLAR - fantomas wrote: On 24.05.22 06:38, Wietse Venema wrote: Hmm... I thought that SPF (and by implication SRS) are concerned with ENVELOPE addresses? originally, yes. I have customer where incoming messages have the "message was received from external source" banne

Re: Milter_Readme - Documentation Edit Request - "order", "reject" and "override" - multiple message modifications?

2022-05-24 Thread James Feeney
On 5/24/22 03:36, Matus UHLAR - fantomas wrote: On 23.05.22 19:31, James Feeney wrote: My understanding has been that a milter can also *modify* a mail message, including both the message body and the message headers.  And then, what version of a mail message will a subsequent milter "see" aft

Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread Dan Mahoney
Hey all, Is there a milter of some sort that I can configure to reject (for some to: addresses) at the end of DATA, but still forward the mail on? Im dealing with some deleted users who both got a lot of spam, but also were in the critical path for things and I’m hoping the VERP bounces trim s

Re: Milter_Readme - Documentation Edit Request - "order", "reject" and "override" - multiple message modifications?

2022-05-24 Thread Viktor Dukhovni
On Tue, May 24, 2022 at 08:12:57AM -0600, James Feeney wrote: > >> What I'm wondering is, is it possible - or even reasonable - to > >> have OpenDKIM "sign" outgoing messages, and have Rspand "verify" > >> incoming messages?  Or, that's not going to work? > > > > since milters run when message is

Re: limit rewriting headers in canonical_maps

2022-05-24 Thread Viktor Dukhovni
On Tue, May 24, 2022 at 08:02:15AM -0600, James Feeney wrote: > > I would like only to rewrite the original From: since that one is used for > > DKIM signatures. I haven't expected more headers to be rewritten. > > > > If there's no way to do this now, I'll have to search for one. > > Would Pos

Re: Milter_Readme - Documentation Edit Request - "order", "reject" and "override" - multiple message modifications?

2022-05-24 Thread Matus UHLAR - fantomas
On 23.05.22 19:31, James Feeney wrote: My understanding has been that a milter can also *modify* a mail message, including both the message body and the message headers.  And then, what version of a mail message will a subsequent milter "see" after a preceding milter has acted upon the mail mes

Re: Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread postfix
> On 05-24-2022 10:14 am, Dan Mahoney wrote: > > configure to reject (for some to: addresses) at the end of DATA, but still > forward the mail on? Not sure I understand, do you mean if a mail is sent to multiple recipients to prevent the mail from being delivered to some of the recipients while

Re: Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread Rob McGee
On 2022-05-24 09:14, Dan Mahoney wrote: Is there a milter of some sort that I can configure to reject (for some to: addresses) at the end of DATA, but still forward the mail on? Im dealing with some deleted users who both got a lot of spam, but also were in the critical path for things and I’m h

Re: Milter_Readme - Documentation Edit Request - "order", "reject" and "override" - multiple message modifications?

2022-05-24 Thread David Bürgin
As was suggested upthread, do check the sendmail milter documentation for questions about the milter protocol. Technical design, API, interaction of multiple milters, succession of milter callback stages, it’s all there. On Ubuntu or Debian install package sendmail-doc and start at /usr/share/doc/

Re: Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread Robert Schetterer
Am 24.05.22 um 16:14 schrieb Dan Mahoney: Hey all, Is there a milter of some sort that I can configure to reject (for some to: addresses) at the end of DATA, but still forward the mail on? Im dealing with some deleted users who both got a lot of spam, but also were in the critical path for t

Re: Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread Viktor Dukhovni
On Tue, May 24, 2022 at 04:14:33PM +0200, Dan Mahoney wrote: > Is there a milter of some sort that I can configure to reject (for > some to: addresses) at the end of DATA, but still forward the mail on? > Im dealing with some deleted users who both got a lot of spam, but > also were in the critica

Re: Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread Benny Pedersen
On 2022-05-24 17:22, Robert Schetterer wrote: your antispam may simply set mail on hold instead of reject, for human inspection, bounce/delete or forward it then manual later put on hold is fine, just bounce is fails i hope not to see this on common mail servers

Re: Milter_Readme - Documentation Edit Request - "order", "reject" and "override" - multiple message modifications?

2022-05-24 Thread Benny Pedersen
On 2022-05-24 16:30, Matus UHLAR - fantomas wrote: the master.cf commented definitions for "smtps/submissions" and "submission" services contain line # -o milter_macro_daemon_name=ORIGINATING in opendkim.conf its used MTA=ORIGINATING