On 2025-04-17 at 16:15:20 UTC-0400 (Thu, 17 Apr 2025 16:15:20 -0400)
Greg Klanderman via Postfix-users <g...@klanderman.net>
is rumored to have said:
Hi,
Am I correct that the after greeting tests are turned off by default?
Yes. You can trust the documentation. It may require careful reading and
logical deduction.
I believe they are controlled with the variables
postscreen_pipelining_enable,
postscreen_non_smtp_command_enable, and
postscreen_bare_newline_enable
which are all set to no on my mail server, but I am seeing the logging
lines for these tests nevertheless.
Hard evidence of that would be helpful to show exactly what is logged
and exactly what configuration postscreen is using.
https://www.postfix.org/DEBUG_README.html#mail gives details.
I guess that is because of pre-greet commands that have been sent, and
postscreen is trying to parse?
I can attest to the fact that this does not happen if you set
"postscreen_greet_action=drop." Looking at the docs to refresh my
recall, it appears that it may happen if you have 'enforce' or 'ignore'
set for either "before 220" test action, to allow postscreen to log the
offered SMTP args.
I don't recall it ever coming up here, which seems odd.
The POSTSCREEN_README states:
| This test is opportunistically enabled when postscreen(8) has to use
| the built-in SMTP engine anyway. This is to make postscreen(8)
logging
| more informative.
for these settings, but it is not entirely clear what 'has to use'
means here.
Usually it means that one of the "after 220" tests is enabled, but as I
say above, a careful re-reading of the docs makes me believe that unless
you drop the connection in postscreen, it continues into the stub SMTP
engine and eventually says '550' to avoid actually accepting mail.
Are the action variables for these tests still applicable in the
case where the tests are 'turned on opportunistically'?
That's what the docs say. Not explicitly, but logically.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com
addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
