how to add X-AntiAbuse headers to main.cf

Scott Grayban

unread,

Feb 24, 2008, 7:13:26 PM2/24/08

to

Does anyone have a the lines to add X-AntiAbuse: headers in main.cf ?

We would like to track our emails for spam abuse and know where they came from
including if they ran from website script.

Thanks
Scott

Scott Grayban

unread,

Feb 25, 2008, 8:50:47 PM2/25/08

to

No one has clue here ? That can't be true right?

Ralf Hildebrandt

unread,

Feb 26, 2008, 4:15:58 AM2/26/08

to

Postfix already puts all that into the received: headers. What else do
you need?

--
Ralf Hildebrandt (i.A. des IT-Zentrums) Ralf.Hil...@charite.de
Charite - Universitätsmedizin Berlin Tel. +49 (0)30-450 570-155
Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962
IT-Zentrum Standort CBF send no mail to snic...@charite.de

Scott Grayban

unread,

Feb 26, 2008, 4:34:17 AM2/26/08

to

Ralf Hildebrandt wrote:
> On 2008-02-25, Scott Grayban <sgra...@NOSPAM-gmail.com> wrote:
>> We would like to track our emails for spam abuse and know where they came from
>> including if they ran from website script.

According to what I see we don't get that above info in the headers. Ran a
email from a php script through postfix and no info was given other then
sending IP.

>
> Postfix already puts all that into the received: headers. What else do
> you need?
>

We are looking for the following...

X-AntiAbuse: ------------------------------------------------------
X-AntiAbuse: This header was added to track abuse, please include it with any
abuse report
X-AntiAbuse: Mail was sent from ${client_name}, contact abuse@$s
X-AntiAbuse: Primary Hostname - ${client_name}
X-AntiAbuse: Primary HostIP - ${client_addr}
X-AntiAbuse: Sender Address Domain - $s
X-AntiAbuse: Auth Sender - ${auth_author}
X-AntiAbuse: Auth ID - ${auth_authen}
X-AntiAbuse: Auth Type - ${auth_type}
X-AntiAbuse: ------------------------------------------------------

Which what we had in our sendmail mc file before we switched to postfix.

Ralf Hildebrandt

unread,

Feb 26, 2008, 6:54:55 AM2/26/08

to

On 2008-02-26, Scott Grayban <sgra...@NOSPAM-gmail.com> wrote:

> According to what I see we don't get that above info in the headers. Ran a
> email from a php script through postfix and no info was given other then
> sending IP.

Received: by www.charite.de (Postfix, from userid 33)
id 0DC881748C3; Wed, 2 Jan 2008 13:30:44 +0100 (CET)

"Postfix, from userid 33" indicates that sendmail was called.
Another way would be to wrap the sendmail call with a script which
always adds headers.

>> Postfix already puts all that into the received: headers. What else do
>> you need?
>>
>
> We are looking for the following...
>
> X-AntiAbuse: ------------------------------------------------------
> X-AntiAbuse: This header was added to track abuse, please include it with any
> abuse report
> X-AntiAbuse: Mail was sent from ${client_name}, contact abuse@$s
> X-AntiAbuse: Primary Hostname - ${client_name}
> X-AntiAbuse: Primary HostIP - ${client_addr}
> X-AntiAbuse: Sender Address Domain - $s

Received: Headers have that info, example:

Received: from [200.1.1.149] (unknown [200.1.1.149])
by mail.asg.local (Postfix) with ESMTP id BAE2955401F
for <Ralf.Hil...@charite.de>; Tue, 26 Feb 2008 12:36:27 +0100 (CET)

> X-AntiAbuse: Auth Sender - ${auth_author}
> X-AntiAbuse: Auth ID - ${auth_authen}
> X-AntiAbuse: Auth Type - ${auth_type}

Postfix can add stuff like that to the headers:
smtpd_sasl_authenticated_header = yes