OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Lost "MAIL FROM" in connection

From: /dev/rob0 (rob0gmx.co.uk)
Date: Wed Aug 23 2006 - 09:20:37 CDT


On Wednesday 23 August 2006 08:56, Robert Schetterer wrote:
> has sombody a example to this?
> is it like
> smtpd_discard_ehlo_keyword_address_maps =
> hash:/etc/postfix/discard_ehelo_map
> vi /etc/postfix/discard_ehelo_map
> 123.123.123.123 pipelining, starttls, auth

Yes, although I'm not sure if it works with the spaces. I use this to
disable TLS over my [already encrypted] VPN.

rootminiluv:/etc/postfix# postconf | egrep 'smtpd?_discard_ehlo_keyword_address_maps'
smtp_discard_ehlo_keyword_address_maps = cidr:$config_directory/ehlo_maps
smtpd_discard_ehlo_keyword_address_maps = cidr:$config_directory/ehlo_maps
rootminiluv:/etc/postfix# cat ehlo_maps
# ehlo_maps, 2005/12/10 - smtp,smtpd_discard_ehlo_keyword_address_maps

192.168.0.0/16 starttls,silent-discard

Anything on a VPN will be in 192.168.0.0/16, so STARTTLS is not
offered, and it's ignored if requested. The "silent-discard" is a
pseudo-keyword which simply means this action is not logged.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header