OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: wish list: RBL processing on trusted Received IP addresses

From: Michael Tokarev (mjttls.msk.ru)
Date: Tue Sep 02 2003 - 09:18:30 CDT


Jim Seymour wrote:
> <postfix-users-mailasthe.com> wrote:
>
> [snip]
>
>>It would be VERY helpful if I could give a list of trusted-clients:
>>
>> trusted-clients =
>> hash:/etc/postfix/trusted-clients
>>
>>Whenever client (site sending my server EMail) is one of those
>>'trusted-clients', then a set of anti-spam processing is perform on the
>>IP address that the trusted client placed into their Received; header.
>
> [snip]
>
> Nothing like this is available, natively, in Postfix. And for good
> reason.
>
>
>>I realize that the trusted_client_restrictions would occur only after
>>the DATA/message was received, but that would still be a BIG help.
>
>
> How, exactly? You can't reject it, once one of your "trusted sites"
> has accepted it. If you do, it will be sent back to probably an
> invalid sender.

BTW, I thought about exactly the same feature, but in reverse form.
For *untrusted* clients, do process Received: headers and refuse
email if it come via insecure host. For trusted clients, redirect
it instead of refusing. It works here using tcp map with header
checks, but I do understand this is unreliable...

/mjt