infra/ansible-role-postfix
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add short-term workaround for smtp-smuggling

Browse source
This commit is contained in:
Sistason 2023-12-26 00:00:38 +01:00
parent bd51758079
commit 387ab5a675
No known key found for this signature in database
GPG key ID: 164E8D2E2CCDD7DC
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
templates/main.cf.j2
View file

@ -34,6 +34,9 @@ smtp_tls_security_level = {{ postfix.ssl.outgoing_security_level }}
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
# short-term workaround for https://www.postfix.org/smtp-smuggling.html
smtpd_data_restrictions = reject_unauth_pipelining
# SMTPD default settings # SMTPD default settings
smtpd_helo_required = yes smtpd_helo_required = yes
strict_rfc821_envelopes = yes strict_rfc821_envelopes = yes