Page 1 of 1

Postfix Headers and MailScanner

Posted: 24 May 2016 14:15
by lecyberian
Hi there guys,

First of all EFA is a great product. Thanks for the great work!

I am working with headers and trying to hide as much as possible about internal relayed server, originating ip etc. I did it already using postfix/main.cf However it seems MailScanner is not logging the messages because i think it cannot find the Message id.

Postfix/main.cf has header_checks enabled as regex

header_checks looks like below:

Code: Select all

/^Received:\ from localhost.*/	IGNORE
/^Received:\ from zimbra.*/  IGNORE
/^X-Originating-IP:/    IGNORE
/^X-Mailer:/            IGNORE
/^DKIM-Filter:/	REPLACE	DKIM-Filter: OpenDKIM Filter
After this Email header looks like below which is exactly how i want:

Code: Select all

Delivered-To: username@gmail.com
Received: by 10.103.14.7 with SMTP id 7csp489753vso;
        Tue, 24 May 2016 07:04:30 -0700 (PDT)
X-Received: by 10.194.242.65 with SMTP id wo1mr4456221wjc.54.1464098670406;
        Tue, 24 May 2016 07:04:30 -0700 (PDT)
Return-Path: <username@companyname.com.br>
Received: from smtp.companyname.com.br ([1.2.3.4])
        by mx.google.com with ESMTPS id m68si23811580wma.60.2016.05.24.07.04.29
        for <username@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 24 May 2016 07:04:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of username@companyname.com.br designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@companyname.com.br;
       spf=pass (google.com: domain of username@companyname.com.br designates 1.2.3.4 as permitted sender) smtp.mailfrom=username@companyname.com.br;
       dmarc=pass (p=QUARANTINE dis=NONE) header.from=companyname.com.br
DKIM-Filter: OpenDKIM Filter
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=companyname.com.br;
	s=AFDDA4EA-20F3-11E6-BD8A-0DC23517D7F8; t=1464098670;
	bh=xeE+xBXOz0rP8tIoWELwJYiWG3NRFBlkMdVMuwZd65E=;
	h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;
	b=AtXcgE8+XFR3XuDc4zFmsqumOftaAkbUyN/WUmF4/y/a2XvRsWWcA1Z09W2DqpQU/
	 vmBrXeYU5dCqjG37ah+VWNM8jQr979iKm49WJw9x2pM3dIUvxBxdw0jLxLQmvYQ8Zd
	 yoDNeRPJUGqqC1wbL9L2OWFtAb7CMSQkJsvL52s0=
X-Virus-Scanned: amavisd-new at internal.companyname.eu
Date: Tue, 24 May 2016 16:04:23 +0200 (CEST)
From: John Doe <username@companyname.com.br>
To: username <username@gmail.com>
Message-ID: <675254224.351.1464098663015.JavaMail.zimbra@companyname.com.br>
Subject: New Mail - 24 May 2016 - 37
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_350_2084991503.1464098663014"
Thread-Topic: New Mail - 24 May 2016 - 37
Thread-Index: YxI/22Q1H2NiSNJTZuUrEUEct7Nuuw==

------=_Part_350_2084991503.1464098663014
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Can anyone spot me in the right direction what i am missing? How to add headers related to MailScanner + MailWatch so that its logged their also?

Thanks in advance!

Re: Postfix Headers and MailScanner

Posted: 30 May 2016 12:52
by shawniverson
You may need a...

Code: Select all

/^RECEIVED:/     HOLD
So that MailScanner can pick up the message. MailScanner watches the HOLD queue.

Re: Postfix Headers and MailScanner

Posted: 02 Jun 2016 14:12
by lecyberian
Hi Shawani,

Thank you for your reply.

I managed to do it before to meet my requirement but here is how:

1) We need to hold something in postfix so that MailScanner engine can take it for scanning / filtering etc

In my case i did not want to use HOLD for Received: because i wanted to play with Received: as explained above.

Instead of

Code: Select all

/^RECEIVED:/     HOLD
I used

Code: Select all

/^Message-ID:/     HOLD
It works as well.

Goodluck!