sender ip address (mailserver) in who object

[tidre]

Hello,
I would like to create a Who Object for the mail filter with the IP of the sender email server.
I have tried this. However, the rule does not take effect. It is also not the last email server, as there is another Proxmox Mail Gateway in front of it.
Filtering based on the domain is too unsafe for me because of spoofing. How can this be solved?

But it is in the header. Example:

Received: from mx1.domain.com (mx1.domain.com [123.123.123.123])
by mx2.domain2.de (Proxmox) with ESMTPS id EED2B280F05
for <user@domain123.com>; Tue, 27 Feb 2024 23:05:44 +0100 (CET)

 

[Stoiko Ivanov]

filtering on the IP can only happen on the machine which speaks with that IP...
why not configure this rule in the first PMG?

else - you can create a what-object to match the Received header for that particular IP if you want to match any mail that at some point went through the server with ip 123.123.123.123

I hope this helps!