From: Mark Wooding <mdw@distorted.org.uk>
Date: Thu, 24 Mar 2016 11:01:03 +0000 (+0000)
Subject: base.m4: Add an `auth=...' note to the Received header if we're relaying.
X-Git-Url: https://git.distorted.org.uk/~mdw/exim-config/commitdiff_plain/8fa6a8430272f7c9f56f409f6ab9abf1a4ec4b26?hp=8fa6a8430272f7c9f56f409f6ab9abf1a4ec4b26

base.m4: Add an `auth=...' note to the Received header if we're relaying.

I'd previously resisted doing this, because the full `AUTH=...' notes
I'm passing around look a lot like email addresses and this might
subvert attempts to use extension addresses or the odin forwarder.  But
it seems a shame to lose this information.

Compromise: report the sender, as a bare user-name, only if the
domain-part is us.  This will, at worst, repeat the user name from the
sending MTA, which told us what it was either as the origin for a local
sender, or the authenticated user name from SMTP authentication or
identd (for submission to localhost).
---