From 9c4da90377a9b8e0d58356e84c74e11383560c18 Mon Sep 17 00:00:00 2001 From: link2xt Date: Sat, 8 Mar 2025 01:57:30 +0000 Subject: [PATCH] Remove authclean service from reinjecting port Messages are already cleaned once on the submission port to avoid leaking the user IP address. There is no need to clean them again and remove the `Received` header which records reception from filtermail. --- cmdeploy/src/cmdeploy/postfix/master.cf.j2 | 1 - 1 file changed, 1 deletion(-) diff --git a/cmdeploy/src/cmdeploy/postfix/master.cf.j2 b/cmdeploy/src/cmdeploy/postfix/master.cf.j2 index 7f67bb97..6351b7e2 100644 --- a/cmdeploy/src/cmdeploy/postfix/master.cf.j2 +++ b/cmdeploy/src/cmdeploy/postfix/master.cf.j2 @@ -82,7 +82,6 @@ filter unix - n n - - lmtp localhost:{{ config.postfix_reinject_port }} inet n - n - 10 smtpd -o syslog_name=postfix/reinject -o smtpd_milters=unix:opendkim/opendkim.sock - -o cleanup_service_name=authclean # Cleanup `Received` headers for authenticated mail # to avoid leaking client IP.