Oefenweb / ansible-postfix

Ansible role to set up postfix in Debian-like systems
MIT License
173 stars 82 forks source link

Set default for postfix_disable_vrfy_command to true. #112

Closed racke closed 3 years ago

racke commented 3 years ago

The VRFY command can be used to see if an email address is valid on the mail server. To make existing email addresses public defies security and privacy principles, so the VRFY command should be disabled. In addition, I don't see a practical use case for the administrator of the Postfix server.

tersmitten commented 3 years ago

Can you sync with master?

racke commented 3 years ago

Sure, no problem. Rebased and pushed.

tersmitten commented 3 years ago

The VRFY command can be used to see if an email address is valid on the mail server. To make existing email addresses public defies security and privacy principles, so the VRFY command should be disabled. In addition, I don't see a practical use case for the administrator of the Postfix server.

What is the default in Ubuntu?

tersmitten commented 3 years ago

Nevermind, I'm pro changing it