OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: remote smtp auth clients - header rewrite question

From: Dan Langille (danlangille.org)
Date: Mon Dec 01 2008 - 20:35:18 CST


On Dec 1, 2008, at 12:17 AM, Victor Duchovni wrote:

> On Sun, Nov 30, 2008 at 06:40:18PM -0500, Dan Langille wrote:
>
>> I tried it like this:
>>
>> 10.0.0.1:smtps inet n - n - - smtpd
>> -o smtpd_sasl_auth_enable=yes
>> -o
>> smtpd_recipient_restrictions
>> =permit_sasl_authenticated,reject_unauth_desti
>> -o smtpd_sasl_type=dovecot
>> -o smtpd_sasl_path=private/auth
>> -o smtpd_sasl_authenticated_header=yes
>> -o smtpd_tls_security_level=encrypt
>> -o header_checks=pcre:/usr/local/etc/postfix/obscure_smtp_auth
>> -o smtpd_tls_wrappermode=yes
>> -o smtpd_tls_cert_file=/usr/local/etc/CERTS/nyi.example.org
>> -o smtpd_tls_key_file=/usr/local/etc/CERTS/nyi.example.org.
>> -o smtpd_client_restrictions=$smtps_client_restrictions
>> -o smtpd_helo_restrictions=$smtps_helo_restrictions
>> -o smtpd_sender_restrictions=$smtps_sender_restrictions
>
> Did you see header_checks documented as a supported parameter in
> http://www.postfix.org/smtpd.8.html (rhetorical question, the answer
> is no). A closer look at the documentation shows this ia feature of
> the cleanup service:
>
> <http://www.postfix.org/BUILTIN_FILTER_README.html#what>

My ignorance is no secret, nor hidden. My error was pointed out to
me on IRC. Mentioning here was in the interest of passing out trials
and errors.

I do appreciate the pointer though. So much reading, so many demands.

Wietse: we must get you up to BSDCan again... I owe you more beer. :)

Thank you

--
Dan Langille
http://langille.org/