search

voxpupuli / puppet-postfix

Puppet postfix module
Apache License 2.0
70 stars 172 forks source link

support smtpd_forbid_bare_newline to mitigate smtp smuggling #383

Closed DomianFlomian closed 4 months ago

DomianFlomian commented 4 months ago

To mitigate the vulnerability of smtp summgling (https://www.postfix.org/smtp-smuggling.html) there is the need to support smtpd_forbid_bare_newline and smtpd_forbid_bare_newline_exclusions

(https://www.postfix.org/postconf.5.html#smtpd_forbid_bare_newline)

DomianFlomian commented 4 months ago

can be done via configs hash, so closed