Commit 5eb777b9 authored by Kristian Klausen's avatar Kristian Klausen 🎉 Committed by Sven-Hendrik Haase
Browse files

postfix: Strip sensitive headers (user-agent + sender ip)

parent d0712657
/^Received:/ IGNORE
/^User-Agent:/ IGNORE
...@@ -21,6 +21,7 @@ ...@@ -21,6 +21,7 @@
- relay_transport_map - relay_transport_map
- domains - domains
- mailman_compat - mailman_compat
- msa_header_checks
- name: update aliases db - name: update aliases db
command: postalias /etc/postfix/aliases command: postalias /etc/postfix/aliases
......
...@@ -22,7 +22,10 @@ localhost:smtp inet n - n - - smtpd ...@@ -22,7 +22,10 @@ localhost:smtp inet n - n - - smtpd
{% endif %} {% endif %}
{% if postfix_server %} {% if postfix_server %}
msa_cleanup unix n - n - 0 cleanup
-o header_checks=pcre:/etc/postfix/msa_header_checks
submission inet n - n - - smtpd submission inet n - n - - smtpd
-o cleanup_service_name=msa_cleanup
-o syslog_name=postfix/submission -o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt -o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes -o smtpd_sasl_auth_enable=yes
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment