RE: Message headers expose local net

1999-04-28 Thread d. divine

Followed FAQ 5.5 explicitly. It made no changes to the header addresses - it
did create delivery failures. If there were other dependencies needed other
than section 5.5 the FAQ did not mention them.

I would assume this is straightforward issue. I doubt that millions are
spent on firewalls to protect information about your internal network - just
to advertise the host names and addresses in the email headers.

Any pointers appreciated.

d. divine

> Messages sent from the local network show the host's IP address and name
in
> the header. What setting will prevent internal network information being
sent
> over the internet (sending only the qmail host name, address and
> sender@domain.).

To really clean up, see FAQ 5.5 and filter the message through
formail (from procmail) or reformail (http://i.am/mrsam) before
qmail-inject. Both will let you delete certain headers or let
ony certain headers go through, AFAIK.

Stefan




Re: Message headers expose local net

1999-04-27 Thread Stefan Paletta

Chris Johnson wrote/schrieb/scribsit:
> 192.168.1.:allow,TCPREMOTEIP="unknown",TCPREMOTEHOST="unknown",RELAYCLIENT=""

Clever! ;-)
Invoke tcpserver with -lunknown and the received header will not
show the server's internal hostname, too.

To really clean up, see FAQ 5.5 and filter the message through
formail (from procmail) or reformail (http://i.am/mrsam) before
qmail-inject. Both will let you delete certain headers or let
ony certain headers go through, AFAIK.
 
Stefan



Re: Message headers expose local net

1999-04-27 Thread Chris Johnson

On Tue, Apr 27, 1999 at 06:32:32PM -0500, d. divine wrote:
> Messages sent from the local network show the host's IP address and name in
> the header. What setting will prevent internal network information being sent
> over the internet (sending only the qmail host name, address and
> sender@domain.).

You can manually set TCPREMOTEIP and TCPREMOTEHOST in qmail-smtpd's environment
for connections from your local network. If you're using tcpserver, you can set
up something like the following in your rules file (assuming your local network
is 192.168.1.*):

192.168.1.:allow,TCPREMOTEIP="unknown",TCPREMOTEHOST="unknown",RELAYCLIENT=""

That's untested, but I don't see any reason why it wouldn't work (and if it
won't, I'm sure someone will be quick to point out why).

Chris



Message headers expose local net

1999-04-27 Thread d. divine

Messages sent from the local network show the host's IP address and name in
the header. What setting will prevent internal network information being
sent over the internet (sending only the qmail host name, address and
sender@domain.).

thank you.