OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Joachim F. Selinger (selingerbawue.de)
Date: Mon Jul 02 2001 - 03:36:50 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi Ralf!

    On 2 Jul, Ralf Hildebrandt wrote:
    > "Joachim F. Selinger" wrote:
    >> I hope this is not an FAQ, but some UCE mails don't show any indication
    >> of the actual recipient address in the headers when accepted by postfix
    >> for a local user. Is there any switch or setting that we are missing in
    >> our postfix setup that would cure this? Our users would like to know
    >> the address through which they received the junk, but sometimes can't,
    >> as the messages get delivered into a cyrus IMAP/POP folder.
    >
    > The headers are not used for delivery, only the envelope recipients are.
    > That means that a spammer can forge the headers as he/she likes, as long
    > as the evelope recipient is local to your system.

    You didn't get my point. I do know, that the headers don't contain that
    vital information in most cases from the sender, but 99/100 e-mails have
    that information included by the one program that must know it, namely the
    receiving SMTPD (here postfix). It must know the information in the
    envelope and there (normally) includes it in a line like

    Received: from mail.berliner-volksbank.de (mail.berliner-volksbank.de
    [195.243.106.18]) by russian-caravan.cloud9.net (Postfix) with
    ESMTP id 8E9AE2AB3C for <postfix-userspostfix.org>; Mon, 2 Jul 2001
    04:30:40 -0400 (EDT)

    This 'for <postfix-userspostfix.org>' part is the one i'm interested in.
    Most mails I receive contain it and it was included by the receiving
    postfix SMTPD.

    I just realized that your mail to me (not the list) did also NOT contain
    that part.

    Maybe it is a parameter in our postfix setup? I haven't found any reason
    why some mails contain it and others not.

    Thanks for replying though!
    Jocki

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (GNU/Linux)
    Comment: For info see http://www.gnupg.org

    iD8DBQA7QDKipHLA4FnPkMoRAiQMAJwK+kJUCJ9GYsWuCOgJ9mEUEFzsywCfZC3k
    typ69uvLexgaLRO3wXm1Jy0=
    =0MhQ
    -----END PGP SIGNATURE-----

    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users