On 5/22/2025 2:34 PM, Wietse Venema via Postfix-users wrote:
<[email protected]>
Postfix receives the message with
From: John Doe <[email protected]>
May 22 16:58:23 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356:
from=<[email protected]>, size=597, nrcpt=1 (queue active)
May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356:
info: header From: John Doe <[email protected]>: From: John
Doe <[email protected]>
And Postfix delivers the message with
From: John Doe <[email protected]>
This is the same as the received header. I suppose that the canonical
mapping did not happen, or that you made a mistake while censorong
the real email address.
I saw that and would normally agree. The odd thing is, the rewrite for
the SMTP From is happening. The only thing I did is remove some
characters in the middle of my address.
Maybe Azure SMTP is doing something to the message. I am not sure.
The header in the received email looks like this:
User-Agent: Mozilla Thunderbird
To: m***[email protected]
Subject: [CAUTION SPOOFING] Test Subject
From: "[email protected]" <[email protected]>
X-TsbHttpDeliveryResponseType: Success
client-request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
Next time, please include the MESSAGE-ID header. This should match
the message ID that was logged by Postfix.
Message-ID: <[email protected]>
Date: Thu, 22 May 2025 11:58:23 -0500
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: m*******[email protected]
Subject: [CAUTION SPOOFING] Test Subject
From: "[email protected]" <[email protected]>
X-TsbHttpDeliveryResponseType: Success
client-request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
Return-Path: [email protected]
May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356:
to=<m***[email protected]>, relay=smtp.azurecomm.net[20.221.43.114]:587,
delay=1.2, delays=0.2/0.01/0.71/0.32, dsn=2.6.0, status=sent (250
2.6.0 1c579855-6162-400e-825f-84b1d30fe5a8 Queued mail for delivery)
May 22 16:58:24 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356: removed
May 22 16:58:28 vm-prod-netbox postfix/smtpd[438511]: disconnect from
unknown[172.22.224.31] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
