Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question regarding smuggling protection in main.cf #2427

Open
myfirstnameispaul opened this issue Aug 11, 2024 · 1 comment
Open

Question regarding smuggling protection in main.cf #2427

myfirstnameispaul opened this issue Aug 11, 2024 · 1 comment

Comments

@myfirstnameispaul
Copy link
Contributor

I was just noticing that main.cf is configured for SMTP smuggling protection with this line:

smtpd_forbid_bare_newline = normalize

The Long-term fix provided by the Postfix documentation states to use:

smtpd_forbid_bare_newline = normalize
smtpd_forbid_bare_newline_exclusions = $mynetworks

I was just wondering why the exclusion was left out?

https://www.postfix.org/smtp-smuggling.html

@kiekerjan
Copy link
Contributor

Perhaps the advice changed after we did the changes to mail-in-a-box? Also, it looks to me like the default is smtpd_forbid_bare_newline_exclusions = $mynetworks if it is not set.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants