Hi Viktor,
On 07.08.2014, at 17:36, Viktor Dukhovni <exim-users@???> wrote:
> Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17])
> (using TLSv1.1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
> by amnesiac.example.com (Postfix) with ESMTPS id 0609B2AA9FF
> ...
>
> […] Are you specifically
> looking for a separate header? Or would decorating the top-most
> Received header (prepended by the receiving MTA) in a similar manner
> be enough?
That’s a good suggestion, thanks. I could tweak my SA rule so that it uses the TLS information that the local receiving MTA adds when it receives a message. This header would be enough, indeed. I would just need to make sure that the SA rule only matches on the local information, not on any prior Received: headers.
Dominik