Le 12/09/2010 10:33, Ralph Seichter a écrit :
On 12.09.10 01:38, Stan Hoeppner wrote:
Am I missing something that's preventing you from using header_checks
for your purposes?
The thread http://marc.info/?l=postfix-users&m=128370729710827&w=2 led
to the understanding that using header_checks -- my first choice -- is
not suitable for my purposes. These checks are performed by the cleanup
service and will invalidate DKIM signatures when removing header lines.
I need a filter applied before the messages are signed.
Received headers should not be included in the DKIM signature. so
removing them won't invalidate DKIM.
anyway, only do that for outbound mail and only remove "internal"
Received headers (do not remove headers that show mail was received from
an external system).
submission inet n - n - - smtpd
-o syslog_name=postsubmission
-o cleanup_service_name=cleanup_submission
...
cleanup_submission unix n - n - 0
cleanup
-o syslog_name=postsubmission
-o header_checks=pcre:/etc/postfix/header_checks_submission.pcre
...
=== header_checks_submission.pcre:
/^Received:\s*from\s+\S+\s+\(\S+\s+\[192\.168\.1\.\d+\]\)\s+by\s+your\.server\.example\s+\(Postfix\)/
IGNORE
for amavisd-new header, just configure amavisd not to add one. in
amavisd.conf, add:
#do not insert a Received header
$insert_received_line = 0;
