From fe749159e4c90ee507a6b1e0372b00f0b39a080c Mon Sep 17 00:00:00 2001 From: link2xt Date: Sat, 8 Mar 2025 02:00:52 +0000 Subject: [PATCH] Document that authclean cleans up the Subject --- cmdeploy/src/cmdeploy/postfix/master.cf.j2 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/cmdeploy/src/cmdeploy/postfix/master.cf.j2 b/cmdeploy/src/cmdeploy/postfix/master.cf.j2 index 7f67bb97..c8c84115 100644 --- a/cmdeploy/src/cmdeploy/postfix/master.cf.j2 +++ b/cmdeploy/src/cmdeploy/postfix/master.cf.j2 @@ -90,5 +90,10 @@ localhost:{{ config.postfix_reinject_port }} inet n - n - # We do not do this for received mails # as this will break DKIM signatures # if `Received` header is signed. +# +# This service also rewrites +# Subject with `[...]` +# to make sure the users +# cannot send unprotected Subject. authclean unix n - - - 0 cleanup -o header_checks=regexp:/etc/postfix/submission_header_cleanup