wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Packages Projects Releases Wiki Activity

mail: clean sender data using header checks

Browse source
This commit is contained in:
Rouven Seifert 2023-09-01 10:54:56 +02:00
parent 431488f93e
commit 4c64f28a41
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
modules/mail.nix
View file

@ -15,6 +15,15 @@ let
user_filter = (&(objectClass=posixAccount)(uid=%n)) user_filter = (&(objectClass=posixAccount)(uid=%n))
pass_filter = (&(objectClass=posixAccount)(uid=%n)) pass_filter = (&(objectClass=posixAccount)(uid=%n))
''; '';
# see https://www.kuketz-blog.de/e-mail-anbieter-ip-stripping-aus-datenschutzgruenden/
header_cleanup = pkgs.writeText "header_cleanup_outgoing" ''
/^\s*(Received: from)[^\n]*(.*)/ REPLACE $1 127.0.0.1 (localhost [127.0.0.1])$2
/^\s*User-Agent/ IGNORE
/^\s*X-Enigmail/ IGNORE
/^\s*X-Mailer/ IGNORE
/^\s*X-Originating-IP/ IGNORE
/^\s*Mime-Version/ IGNORE
'';
in in
{ {
sops.secrets."rspamd-password".owner = config.users.users.rspamd.name; sops.secrets."rspamd-password".owner = config.users.users.rspamd.name;
@ -104,6 +113,7 @@ in
"permit_mynetworks" "permit_mynetworks"
"reject_unauth_destination" "reject_unauth_destination"
]; ];
smtp_header_checks = "pcre:${header_cleanup}";
# smtpd_sender_login_maps = [ "ldap:${ldap-senders}" ]; # smtpd_sender_login_maps = [ "ldap:${ldap-senders}" ];
alias_maps = [ "hash:/etc/aliases" ]; alias_maps = [ "hash:/etc/aliases" ];
alias_database = [ "hash:/etc/aliases" ]; alias_database = [ "hash:/etc/aliases" ];