From e931e103fe1d6db81681e3c9732d21e9860acdcd Mon Sep 17 00:00:00 2001 From: KiekerJan Date: Wed, 10 Jan 2024 15:34:06 +0100 Subject: [PATCH] [security] SMTP smuggling: update short term fix (#2346) Update short term fix according to postfix advisory at https://www.postfix.org/smtp-smuggling.html. --- setup/mail-postfix.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/setup/mail-postfix.sh b/setup/mail-postfix.sh index de5dee0e..6ceb2edf 100755 --- a/setup/mail-postfix.sh +++ b/setup/mail-postfix.sh @@ -72,7 +72,8 @@ tools/editconf.py /etc/postfix/main.cf \ # Guard against SMTP smuggling # This short-term workaround is recommended at https://www.postfix.org/smtp-smuggling.html tools/editconf.py /etc/postfix/main.cf \ - smtpd_data_restrictions=reject_unauth_pipelining + smtpd_data_restrictions=reject_unauth_pipelining \ + smtpd_discard_ehlo_keywords="chunking, silent-discard" # ### Outgoing Mail