diff options
| author | Malfurious <m@lfurio.us> | 2024-06-10 09:06:09 -0400 |
|---|---|---|
| committer | Malfurious <m@lfurio.us> | 2024-06-10 09:06:09 -0400 |
| commit | dc7f1bb8f52569b158f0c24c02070fcc459e580d (patch) | |
| tree | bdb7ae2103939bef191c9497594853d84a80e263 /postfix/submission_header_checks | |
| parent | 4348ca29fb05e12a5308e48c908b00dc1fc83d0f (diff) | |
| download | mailnode-dc7f1bb8f52569b158f0c24c02070fcc459e580d.tar.gz mailnode-dc7f1bb8f52569b158f0c24c02070fcc459e580d.zip | |
postfix: Prevent leaking MUA IP addresses
Protect user privacy by stripping IP addresses from headers received
from authenticated mail submission. Headers for mail received from
other servers are unaffected.
Signed-off-by: Malfurious <m@lfurio.us>
Diffstat (limited to 'postfix/submission_header_checks')
| -rw-r--r-- | postfix/submission_header_checks | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/postfix/submission_header_checks b/postfix/submission_header_checks new file mode 100644 index 0000000..a792ca5 --- /dev/null +++ b/postfix/submission_header_checks @@ -0,0 +1,2 @@ +/^Received: from [^ ]+ \([^ ]+ \[[IPv0-9a-f:.]+\]\)\s+(.* \(Postfix\) with .+)$/ REPLACE Received: $1 +/^X-Originating-IP:.*/ IGNORE |