OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: cut out dkim sig via simple filter to buggy firewalled domain

From: mouss (mlist.onlyfree.fr)
Date: Fri Jul 27 2007 - 03:15:18 CDT


Robert Schetterer wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> mouss schrieb:
>
>> [snip]
>>>>> instead of writing a filter, you could do this with header_checks:
>>>>> - add an smtpd with its own cleanup service
>>>>>

I said: "its own cleanup service".
>>>>> 12525 ... smtpd
>>>>> -o cleanup_service_name=dkim_cleanup
>>>>> - in this cleanup service, use header_checks to remove the
>>>>> DKIM header
>>>>> dkim_cleanp ... cleanup
>>>>>

look at the last word above: it's a cleanup, not an smtpd.

>>>>> -o header_checks=pcre:/etc/postfix/remove_dkim_header
>>>>> == remove_dkim_header:
>>>>> /^DKIM-Signature:/ IGNORE
>>>>> then use FILTER to direct mail to 12525 instead of your
>>>>> dkim_remover.
>>>>>
>>>>>
>>>> [snip]
>>
> Hi Mouss,
>
> - -o heaader_checks with smtpd
> dont work cause it belongs to cleanup
>

read my post again. you'll see that I talked about adding a cleanup service.