>> You may want to suppress the SIZE information . . . .
> 
> No, this is silly, one is better off advertising the maximum size
> to avoid the vast majority unnecessary partial transmission of
> overly large messages.  An attacker can tie up SMTP server resources
> whether the SIZE limit is known or not.

OK.

> Regardless, one should not enable SMTP features one does not want to
> offer to outside parties. Potentially ETRN, DSN, ...

A followup question.  If I suppress the advertising of an extended
feature by listing it in smtpd_discard_ehlo_keywords, does that also
disable the feature?  Or do I have to do other things to actually
turn a feature off and make it unavailable even if a client tries to
issue a command (such as ETRN) that was not advertised in my EHLO
response?

Rich Wales
ri...@richw.org

Reply via email to