mirror of
https://github.com/chatmail/relay.git
synced 2026-08-10 10:30:51 +00:00
feat(postfix): disable processing of MIME headers
Default behavior is processing headers that are actually part of the message body. This is unlikely to be needed as headers such as Received are not added into MIME parts, but may result in broken DKIM signatures if the body is modified.
This commit is contained in:
@@ -85,6 +85,14 @@ inet_protocols = all
|
|||||||
|
|
||||||
lmtp_header_checks = regexp:/etc/postfix/lmtp_header_cleanup
|
lmtp_header_checks = regexp:/etc/postfix/lmtp_header_cleanup
|
||||||
|
|
||||||
|
# Do not apply header checks to MIME headers
|
||||||
|
# and other headers that are actually part of the message body.
|
||||||
|
# Reference:
|
||||||
|
# <https://www.postfix.org/postconf.5.html#disable_mime_input_processing>
|
||||||
|
# <https://www.postfix.org/header_checks.5.html>
|
||||||
|
# <https://stump.io/blog/2020/11/29/a-little-gotcha-with-postfixs-header_checks/>
|
||||||
|
disable_mime_input_processing = yes
|
||||||
|
|
||||||
mua_client_restrictions = permit_sasl_authenticated, reject
|
mua_client_restrictions = permit_sasl_authenticated, reject
|
||||||
mua_sender_restrictions = reject_sender_login_mismatch, permit_sasl_authenticated, reject
|
mua_sender_restrictions = reject_sender_login_mismatch, permit_sasl_authenticated, reject
|
||||||
mua_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, permit
|
mua_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, permit
|
||||||
|
|||||||
Reference in New Issue
Block a user