Quelltext der Seite NTACurrent en:Header Authentication

== Overview ==
Header Authentication is an additional mechanism to prevent unauthorised parties from using the Cryptshare Mail Gateway as a relay to send emails to any domain (open relay). With enabled Header Authentication, all messages coming from [https://wiki.cryptshare.com/display/C4NTAMB/Trusted+Hosts trusted hosts] will need to have a certain header value, otherwise they are discarded.

Header Authentication can be enabled during the [https://wiki.cryptshare.com/display/C4NTAMB/.Installation+of+Cryptshare+Mail+Gateway+v1.1.2 initial setup]. This page describes how to configure it at a later time.
== Configuration Steps ==
# Open '''/opt/cryptshare-mail-gateway/smtp-filter/config.properties''' in an editor.
# To specify the name of the required header, change the value of '''app.smtp.auth.header.name'''. Otherwise the default value "X-CS-AuthenticationKey" is used.
 app.smtp.auth.header.name = X-MyAuthenticationHeader
# To enable Header Authentication and specify the expected value of the header, change the value of '''app.smtp.auth.header.value'''. If you leave it empty or the line is commented out, Header Authentication will be disabled.
 app.smtp.auth.header.value = my-expected-header-value
# Save the file.
# Restart the cmg-filter service:
 systemctl restart cmg.filter
{{NoteBox|title=|content=Please note that this header is removed by the Cryptshare Mail Gateway, so that the (confidential) value of the header isn't made public. Do no specify any header that is required to remain in the message as authentication header.
}}