>From documentation : postconf.5.html#resolve_dequoted_address

/resolve_dequoted_address (default: yes)

    Resolve a recipient address safely instead of correctly, by looking
inside quotes.

    By default, the Postfix address resolver does not quote the address
localpart as per RFC 822, so that additional @ or % or ! operators remain
visible. This behavior is safe but it is also technically incorrect.

    If you specify "resolve_dequoted_address = no", then the Postfix
resolver will not know about additional @ etc. operators in the address
localpart. This opens opportunities for obscure mail relay attacks with
user@domain@domain addresses when Postfix provides backup MX service for
Sendmail systems.
/

Setting resolve_dequoted_address  = no   ==> us...@example.com@example.com
is rejected
Setting resolve_dequoted_address  = yes  ==> us...@example.com@example.com
is accepted

But as said in the doc seems to be a bad idea.

So what to do ?




-----
Thank you for helping
________
Opensuse Leap 15
--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html

Reply via email to