[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Wietse Venema via Postfix-users
Ellie via Postfix-users: > mail-1 | /usr/sbin/postconf: fatal: file /etc/postfix/master.cf: line > 16: bad field count > > (Sorry if I did something super obvious wrong!) Yes you did. You forgot to start line 16 with a space or tab. Wietse __

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Viktor Dukhovni via Postfix-users
On Tue, Feb 04, 2025 at 06:29:47PM -0500, postfix--- via Postfix-users wrote: > I might have misunderstood the point of this as im jumping in late, but > there is both `header_checks` and `smtp_header_checks`. > Normal header checks get applied to (smtpd) mail being received on port 25 > on it's w

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread postfix--- via Postfix-users
And Smtp header checks get applied to (smtp) mail received by submission on its way out to the world. NO. "smtp_header_checks" are applied on output to all mail that leaves the system, regardless of how it arrived, whether inbound from a remote source, an SMTP submission, or generated locally.

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Viktor Dukhovni via Postfix-users
On Tue, Feb 04, 2025 at 08:17:08PM -0500, postfix--- via Postfix-users wrote: > > If the intent is to only censor submission, This is not correct, it will > > drop all "Received" headers from any mail that is not delivered locally, > > so entirely unsuitable for relaying non-submission mail, risks

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Wietse Venema via Postfix-users
Ellie via Postfix-users: > On 2/4/25 4:50 PM, Wietse Venema via Postfix-users wrote: > > Yes you did. You forgot to start line 16 with a space or tab. > > > > Wietse > Oops, how silly, sorry! Okay, I think I got it: > > smtp inet n - n - - smtpd >-o smtpd_tls_security_level=encrypt >-

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Ellie via Postfix-users
On 2/4/25 4:50 PM, Wietse Venema via Postfix-users wrote: Yes you did. You forgot to start line 16 with a space or tab. Wietse Oops, how silly, sorry! Okay, I think I got it: smtp inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o { header_checks=regexp:/etc/postfix/header

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Ellie via Postfix-users
On 2/4/25 7:07 PM, Ellie via Postfix-users wrote: Sorry for me perhaps bugging this again! I pondered how I could possibly be using the wrong file, but I can't think of anything. To rule out that pcre is the issue, I installed all versions of pcre and pcre2 both 16 and 32 that Alpine Linux off

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Reto via Postfix-users
On Tue, Feb 04, 2025 at 05:09:52PM -0500, Wietse Venema via Postfix-users wrote: > I will implement Ellie's request, and move the Postfix 3.10 code > freeze up by a few days. > > smtpd_hide_session_info (default: no) > > Hide SMTP session info from the Received: message header. Do not > record th

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Ömer Güven via Postfix-users
Hi! I didn‘t read the whole thread but I understand that you want to strip privacy relevant user data from MUA submissions. In master.cf, add twice, one for smtps (port 465) and one for submission (port 587): -o cleanup_service_name=submission-header-cleanup Then add this line to the same

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Florian Piekert via Postfix-users
Good morning, out of curiosity, does it possibly -if implemented- break ARC signature creation of e.g. rspamd, which seems to use auth-info? ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=u...@doma.in smtp.mailfrom=u...@doma.in Or is this transferred via MILT

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Ömer Güven via Postfix-users
Oops, sorry. My initial mail was sent 6 hours ago, but I forgot to Reply-All. Meanwhile, there is already another solution provided. Ömer > Am 05.02.2025 um 08:19 schrieb Ömer Güven via Postfix-users > : > >  > Hi! > > I didn‘t read the whole thread but I understand that you want to strip

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Bill Cole via Postfix-users
On 2025-02-03 at 21:55:14 UTC-0500 (Tue, 4 Feb 2025 03:55:14 +0100) Ellie via Postfix-users is rumored to have said: On 2/3/25 11:56 PM, Wietse Venema via Postfix-users wrote: If this is for messages submitted on port 587 (submission) or 465 (smtps or submissions), then you can simply delete a

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > On Mon, Feb 03, 2025 at 05:56:45PM -0500, Wietse Venema via Postfix-users > wrote: > > > There is no built-in featrue to delete IP addresses from headers. > > But, given the expected header form, it is not difficult to craft a PCRE > table that does the job w

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Wietse Venema via Postfix-users
ellie via Postfix-users: > I sent a test mail to a throwaway account now, and found the according > log entry! The one you wanted was gone since I happened to have reboot > with wiped logs since then. I hope it shows something helpful :-o sorry > again for the effort. OK, so I have forgotten ho

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread postfix--- via Postfix-users
smtpd_hide_session_info (default: no) Hide SMTP session info from the Received: message header. Do not record the SMTP client name or IP address, SASL login name, or TLS session details. This reduces the Received: header from: Received: from by servername (Postfix) with id

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Ellie via Postfix-users
On 2/4/25 7:00 PM, Wietse Venema via Postfix-users wrote: You forgot to "postfix reload", or you edited the wrong master.cf file. What is the output from: postconf -Mf submission/inet It should show the new header_checks setting. These master.cf sttings override main.cf so no need to del

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Wietse Venema via Postfix-users
Ellie via Postfix-users: > Yet "Received" still seems present in full, you can see it with this > e-mail I'm typing in this moment. Received: from [10.42.0.75] (dynamic-176-003-178-138.176.3.pool.telefonica.de [176.3.178.138]) by mail.ekdawn.com (Postfix) with ESMTPSA

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread ellie via Postfix-users
On 2/4/25 19:48, Wietse Venema via Postfix-users wrote: What did Postfox log at 18:06:46 - postfix/submission/smtpd or postfix/smtpd? Wietse I sent a test mail to a throwaway account now, and found the according log entry! The one you wanted was gone since I happened to have reboot

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread Ellie via Postfix-users
On 2/5/25 12:29 AM, postfix--- via Postfix-users wrote: I might have misunderstood the point of this as im jumping in late, but there is both `header_checks` and `smtp_header_checks`. That seems very promising, I tried to put it into practice right now: smtp inet n - n - - smtpd -o smtpd_tls

[pfx] Re: IP discard for authenticated e-mails

2025-02-04 Thread postfix--- via Postfix-users
-o { smtp_header_checks = pcre:{{/^Received:/ IGNORE}} } I don't know if that is valid syntax. It might need to be done in main instead of master. Not every postfix setting works in master. Hopeful someone more knowledgeable can step in. ___ Postfi