From 387ab5a6756df64e293d72908d2864bdd64c77c4 Mon Sep 17 00:00:00 2001
From: Sistason <c3infra@sistason.de>
Date: Tue, 26 Dec 2023 00:00:38 +0100
Subject: [PATCH] add short-term workaround for smtp-smuggling

---
 templates/main.cf.j2 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/templates/main.cf.j2 b/templates/main.cf.j2
index e932eab..ac452d1 100644
--- a/templates/main.cf.j2
+++ b/templates/main.cf.j2
@@ -34,6 +34,9 @@ smtp_tls_security_level = {{ postfix.ssl.outgoing_security_level }}
 
 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
 
+# short-term workaround for https://www.postfix.org/smtp-smuggling.html
+smtpd_data_restrictions = reject_unauth_pipelining
+
 # SMTPD default settings
 smtpd_helo_required = yes
 strict_rfc821_envelopes = yes