external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2024-12-23 07:27:05 +00:00
Code Issues Releases Wiki Activity

[security] SMTP smuggling: update short term fix (#2346)

Browse Source 
Update short term fix according to postfix advisory at https://www.postfix.org/smtp-smuggling.html.
This commit is contained in:
KiekerJan 2024-01-10 15:34:06 +01:00 committed by GitHub
parent 7646095b94
commit e931e103fe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
setup/mail-postfix.sh
View File

@ -72,7 +72,8 @@ tools/editconf.py /etc/postfix/main.cf \
# Guard against SMTP smuggling
# This short-term workaround is recommended at https://www.postfix.org/smtp-smuggling.html
tools/editconf.py /etc/postfix/main.cf \
smtpd_data_restrictions=reject_unauth_pipelining
smtpd_data_restrictions=reject_unauth_pipelining \
smtpd_discard_ehlo_keywords="chunking, silent-discard"
# ### Outgoing Mail