OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: About date spoofing

From: Eddy Beliveau (eddy.beliveauhec.ca)
Date: Fri Mar 14 2008 - 15:23:45 CDT


----- Message d'origine de mouss ----- >
you don't need a pre-cleanup, since receive_override_options seems
> enough for you.
> so
> A- remove the pre-cleanup
> B- remove the options you added to "cleanup"
> C- make sure to use receive_override_options before the filter (to disable
> rewrite)
> and try again

Hi! Mouss,

I did as your recommendations A and B

Please note that I'm NOT using any 'receive_override_options' in my main.cf
and the last line of my 'main.cf' is:
content_filter = smtp-amavis:[127.0.0.1]:10024

Now, I tested on both ports (smtp and submission) and it worked correctly
with the attach extract of my master.cf

Thanks,
Eddy

smtp inet n - n - - smtpd
# -o cleanup_service_name=pre-cleanup

submission inet n - n - - smtpd
        -o smtpd_etrn_restrictions=reject
        -o local_header_rewrite_clients=permit_sasl_authenticated,reject

#pre-cleanup unix n - n - 0 cleanup
# -o virtual_alias_maps=
# -o canonical_maps=
# -o sender_canonical_maps=
# -o recipient_canonical_maps=
# -o masquerade_domains=

cleanup unix n - n - 0 cleanup
# -o mime_header_checks=
# -o nested_header_checks=
# -o body_checks=
# -o header_checks=

smtp-amavis unix - - n - 10 smtp
    -o smtp_data_done_timeout=1200
    -o smtp_send_xforward_command=yes
    -o disable_dns_lookup=yes

127.0.0.1:10025 inet n - n - - smtpd
    -o content_filter=
    -o local_recipient_maps=
    -o relay_recipient_maps=
    -o smtpd_restriction_classes=
    -o smtpd_client_restrictions=
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_data_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o mynetworks=127.0.0.0/8
    -o mynetworks_style=host
    -o strict_rfc821_envelopes=yes
    -o in_flow_delay=0
    -o
receive_override_options=no_unknown_recipient_checks,no_header_body_checks