http://qs321.pair.com?node_id=1030851


in reply to Postfix: Piping an email into a PERL script

May I suggest some sort of cryptographic signing of the request? Headers are very easy to spoof.

--MidLifeXis

  • Comment on Re: Postfix: Piping an email into a PERL script

Replies are listed 'Best First'.
Re^2: Postfix: Piping an email into a PERL script
by Zzenmonk (Sexton) on Apr 26, 2013 at 15:22 UTC

    This is definitely something one should think of. My solution is implemented behind the MTA of the network. The MTA takes care of security in my case. I mean as good as it can (DNSBL, spam filter and so on).

    The best medicine against depression is a cold beer!
[reply]

      Is there a need to protect against internal users spoofing this? It is quite easy to speak SMTP.

      --MidLifeXis

[reply]

        Indeed! And I do not know how to protect a mail server from faked headers! I mean you can just telnet the port 25 of a MTA and write whatever you want. Mail is a risk, remains a risk and will always remain a risk.

        The best medicine against depression is a cold beer!
[reply]

In Section Cool Uses for Perl