On Fri, May 9, 2008 08:55, ram wrote:
>
> On Fri, 2008-05-09 at 01:44 +0200, Benny Pedersen wrote:
>> On Thu, May 8, 2008 23:19, mouss wrote:
>>
>> > configure postfix to replace previous ones
>> > /^(X\-Envelope\-From:.*)/ REPLACE X-$1
>>
>> envelope from can here be forged
>
> Precisely what I
> On Fri, May 9, 2008 08:55, ram wrote:
>
> > Precisely what I am afraid of. But the issue is whatever header I use
> > for envelope-from all of them can be trivially forged
> > I am trying replacing all the X-Envelope headers before sending them to
> > scan servers
On 09.05.08 23:39, Benny Pede
On Fri, May 9, 2008 08:55, ram wrote:
> Precisely what I am afraid of. But the issue is whatever header I use
> for envelope-from all of them can be trivially forged
> I am trying replacing all the X-Envelope headers before sending them to
> scan servers
dont change headers on trusted routes, y
ram wrote:
On Fri, 2008-05-09 at 01:44 +0200, Benny Pedersen wrote:
On Thu, May 8, 2008 23:19, mouss wrote:
configure postfix to replace previous ones
/^(X\-Envelope\-From:.*)/ REPLACE X-$1
envelope from can here be forged
Precisely what I am afraid of. But the issue i
Benny Pedersen wrote:
On Thu, May 8, 2008 23:19, mouss wrote:
configure postfix to replace previous ones
/^(X\-Envelope\-From:.*)/ REPLACE X-$1
envelope from can here be forged
the header check above will rewrite any such header received from the
internet. so forgery is not an
On Fri, 2008-05-09 at 01:44 +0200, Benny Pedersen wrote:
> On Thu, May 8, 2008 23:19, mouss wrote:
>
> > configure postfix to replace previous ones
> > /^(X\-Envelope\-From:.*)/ REPLACE X-$1
>
> envelope from can here be forged
Precisely what I am afraid of. But the issue is whatever header I
On Thu, May 8, 2008 23:19, mouss wrote:
> configure postfix to replace previous ones
> /^(X\-Envelope\-From:.*)/ REPLACE X-$1
envelope from can here be forged
better for postfix is to add
envelope_sender_header Return-Path
in local.cf
Benny Pedersen
Need more webspace ? http://www.servag
ram wrote:
At the MTA( postfix) I am inserting X-Envelope-From:
If The mail had already a X-Envelope-From before landing at my MTA then
There would be multiple lines of these
configure postfix to replace previous ones
/^(X\-Envelope\-From:.*)/ REPLACE X-$1
I am assuming you are not addi
At the MTA( postfix) I am inserting X-Envelope-From:
If The mail had already a X-Envelope-From before landing at my MTA then
There would be multiple lines of these
Then SA refuses to do SPF for these messages , and I can see in my
debug logs
-
[18469] dbg: message: X-Envelope-Fr
