On Tue, 07 Jul 2009, Sahil Tandon wrote:

> On Tue, 07 Jul 2009, Daniel L. Miller wrote:
> 
> > So...my initial thought was I'd have to create a public Internet name  
> > for the fax gateway, and apply some level of security to only accept  
> > submissions from Intuit.  However, I'm now wondering if I can accomplish  
> > the same thing by using address extensions instead of a different server  
> > name.  So I'd be sending emails to "1234567890+...@mydomain.com", and  
> > Postfix would then identify a fax is to be sent by the extension,  
> > translate that to "1234567...@fax.myinternaldomain.com", and process  
> > accordingly.  I would still have to protect the "fax" extension, but my  
> > thought is that the extension would be less likely to be probed than a  
> > published DNS name, and therefore be subject to fewer attacks.
> 
> Use some sort of virtual alias mapping along with ensuring that
> foo+...@example.org is valid at SMTP time.  Untested example:
> 
> /^(\d+)\+...@mydomain.com$/     $...@fax.myinternaldomain.com

Just to clarify, the above is a PCRE map example.

-- 
Sahil Tandon <sa...@tandon.net>

Reply via email to