From 59bc4f7aea9da3f3ccf9ceca9a07af825de9e4af Mon Sep 17 00:00:00 2001
From: anrc <15327800+githtz@users.noreply.github.com>
Date: Thu, 24 Sep 2020 13:16:25 +0200
Subject: [PATCH] Remove the username from the milter_headers

Rspamd adds the name of the authenticated user by default. Setting add_smtp_user to false prevents the login to be leaked.
---
 core/rspamd/conf/milter_headers.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/core/rspamd/conf/milter_headers.conf b/core/rspamd/conf/milter_headers.conf
index cb680cfa..7da200df 100644
--- a/core/rspamd/conf/milter_headers.conf
+++ b/core/rspamd/conf/milter_headers.conf
@@ -5,6 +5,9 @@ skip_authenticated = false;
 use = ["x-spamd-bar", "x-spam-level", "x-virus", "authentication-results"];
 
 routines {
+  authentication-results {
+    add_smtp_user = false;
+  }
   x-virus {
     symbols = ["CLAM_VIRUS", "FPROT_VIRUS", "JUST_EICAR"];
   }