On Tue, 07 Jul 2009, Daniel L. Miller wrote:

> So...my initial thought was I'd have to create a public Internet name  
> for the fax gateway, and apply some level of security to only accept  
> submissions from Intuit.  However, I'm now wondering if I can accomplish  
> the same thing by using address extensions instead of a different server  
> name.  So I'd be sending emails to "[email protected]", and  
> Postfix would then identify a fax is to be sent by the extension,  
> translate that to "[email protected]", and process  
> accordingly.  I would still have to protect the "fax" extension, but my  
> thought is that the extension would be less likely to be probed than a  
> published DNS name, and therefore be subject to fewer attacks.

Use some sort of virtual alias mapping along with ensuring that
[email protected] is valid at SMTP time.  Untested example:

/^(\d+)\[email protected]$/     [email protected]

-- 
Sahil Tandon <[email protected]>

Reply via email to