From: Andy Cravens (acravensuen.org)
Date: Fri Jan 20 2006 - 11:26:00 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Wietse Venema wrote:

>Andy Cravens:
>[ Charset ISO-8859-1 unsupported, converting... ]
>
>
>>I have a situation where user mail accounts are created with the
>>employee ID as the username. The user sets up their client with the
>>username they want the public to see and an alias is created for that
>>"public" username. Outgoing mail is fine and the email headers do not
>>reveal any employee ID information.
>>
>>However, incoming mail shows:
>>
>>X-Original-To: johndoedomain.com
>>Delivered-To: id64093domain.com
>>
>>If the user forwards one of their emails and the headers are included,
>>their employee ID is revealed. Is there a way to stop postfix from
>>revealing the final account destination?
>>
>>
>
>You can turn off the Delivered-To: header in the local(8) delivery
>agent, but that feature was not added to the virtual(8) agent.
>Maybe someone can copy some code and submit a patch.
>
> Wietse
>
>

Even though all accounts are local, it looks like this option too would
be a problem too.

The docs for prepend_delivered_header state "This information is used
for mail delivery loop detection." and "Turning off the Delivered-To:
header when forwarding mail is not recommended."

http://www.postfix.org/postconf.5.html#prepend_delivered_header

 From what I can tell, this problem only affects a user that forwards an
email. Does postfix have a way to strip the header info of the
forwarded mail? Also have to be careful here because even if there were
such a mechanism, it would have to allow full headers to be sent when
forwarding spam/abuse complaints.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]