Re: rule for restricting incoming email

[Reindl Harald]

Am 11.02.2015 um 18:30 schrieb Rajesh M:

i am using qmailtoaster

when the emails are sent to specified recepients via bcc then  there is a header
Delivered-To created which i tried to use to check

however spamassassin does not seem to check Delivered-To header
what could be the problem ?

that you need to be carful which headers you trust



with postfix you can generate envelope headers
http://comments.gmane.org/gmane.mail.postfix.user/193456

smtpd_data_restrictions =
 reject_unauth_pipelining
 reject_multi_recipient_bounce
 check_sender_access pcre:/etc/postfix/x_envelope_from.cf
 check_recipient_access pcre:/etc/postfix/x_envelope_to.cf

cat /etc/postfix/x_envelope_from.cf
/(.*)/ prepend X-Local-Envelope-From: <$1>

cat /etc/postfix/x_envelope_to.cf
/(.*)/ prepend X-Local-Envelope-To: <$1>

you need to make sure that your MTA prepends them unconditionally because otherwise they could be forged and when you apply that below you can't remove the sanme headers with header_checks, tried it, asked upstream, no way, your own prepended disappears too

signature.asc
Description: OpenPGP digital signature