"Todd A. Jacobs" <[EMAIL PROTECTED]> writes:

> I'm using Postfix, with all admin mail being redirected to the nospam
> account. If I enable the following rule at the top of my incoming filter:
> 
>       to      postmaster@*    ok
> 
> mail for root is still being held for CONFIRM by TMDA. However, if I use a 
> headers rule instead, everything is fine. Here is the actual header of the 
> message:
> 
>     From [EMAIL PROTECTED] Sat Oct 26 00:23:32 2002
>     Return-Path: <[EMAIL PROTECTED]>
>     Delivered-To: [EMAIL PROTECTED]
>     Received: from gateway.codegnome.org (gateway.codegnome.org [127.0.0.1])
>           by gateway.codegnome.org (Postfix) with ESMTP id C22249F51D
>           for <[EMAIL PROTECTED]>; Sat, 26 Oct 2002 00:22:07 -0700 (PDT)
>     To: [EMAIL PROTECTED]
>     From: Test Account <[EMAIL PROTECTED]>
>     Date: Sat, 26 Oct 2002 00:22:07 -0700 (PDT)
>     Message-ID: <[EMAIL PROTECTED]>
>     X-Delivery-Agent: TMDA/0.62
> 
> As you can see, the "To:" field clearly says "postmaster," so why is the
> mail being held up by the filter?

TMDA does not look at the To field when processing filters.  It's
commonly forged by spammers.  See this FAQ entry:

http://www.tmda.net/faq.cgi?req=show&file=faq04.006.htp

By forwarding, you've changed the envelope recipient (stored in the
Delivered-To field, above) to [EMAIL PROTECTED]  If the nospam
address is not allowed by your filter, then TMDA will request
confirmation.  This change of envelope recipient happens anytime you
forward mail.

Solutions for this can vary based on your MTA.  You should explore the
RECIPIENT_HEADER variable.

http://www.tmda.net/config-vars.html#RECIPIENT_HEADER

Another possibility would be to forward mail for important system
accounts like postmaster to an address that is *not* protected by
TMDA.  Say you forward it to nospam+postmaster.  Postfix allows you to
create a ~/.forward+postmaster file that has directions for delivering
mail addressed to <user>+postmaster (I'm assuming the user account is
<nospam>).  That file can contain instructions for delivering the mail
directly, without involving TMDA.

I use a similar technique with qmail.  I use the address thl-admin and
forward anything related to system administration there, completely
bypassing TMDA.


Tim
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to