Re: strict_rfc821_envelopes possibly broken on postfix-3.3.1

2018-09-05 Thread Wietse Venema
Tuomo Soini: > I was debugging issue with email system sending mail from in wrong > format: > > MAIL From: u...@domain.tld Indeed, this is not RFC compliant. > Adding <> to email address to (broken) software gui fixed smtp > sending, so this worked: > > MAIL From: That form is almost RFC comp

Re: Patch: eliminate postfix-script warnings about symlinks

2018-09-05 Thread Wietse Venema
Luc Pardon: > The first question is obviously: can we disallow symlinks to the outside > world by definition? I'd say the answer is yes, but $(whoami) ? Here is some background on pathname safety. A symlink is unsafe if it resolves to an unsafe pathname. A pathname is unsafe is the target itself

Heads up for Gentoo users: mail-mta/postfix-3.3.1-r1 has permissions problems

2018-09-05 Thread Phil Stracchino
For anyone using Postfix on Gentoo, be aware that mail-mta/postfix-3.3.1-r1 installs with many incorrect file permissions that result in impaired functionality (specifically, postdrop won't work). You may want to consider rolling back to 3.2.4 until the ebuild is fixed. If you want to just fix th

Re: Patch: eliminate postfix-script warnings about symlinks

2018-09-05 Thread Luc Pardon
On 05-09-18 15:04, Luc Pardon wrote: > The Q&D shell scriptlet below my sig would probably do the trick > > == > #!/bin/sh > > # This would not be needed if integrated into postfix-script: > BASE=$(postconf -hx config_directory | sed "s/\n$//") > > # Search fo

Patch: eliminate postfix-script warnings about symlinks

2018-09-05 Thread Luc Pardon
On 05-09-18 13:26, Wietse Venema wrote: > Luc Pardon: >> Hello, >> >> Running Postfix 3.3.1 under Linux, postfix-script produces pointless >> warnings if/when there are symbolic links in or below $config_directory. > > The problem is that the symlink may point to any location including > a file

strict_rfc821_envelopes possibly broken on postfix-3.3.1

2018-09-05 Thread Tuomo Soini
I was debugging issue with email system sending mail from in wrong format: MAIL From: u...@domain.tld Adding <> to email address to (broken) software gui fixed smtp sending, so this worked: MAIL From: But I found out that strict_rfc821_envelope check should not be enabled by default and verifi

Re: Patch: eliminate postfix-script warnings about symlinks

2018-09-05 Thread Wietse Venema
Luc Pardon: > Hello, > > Running Postfix 3.3.1 under Linux, postfix-script produces pointless > warnings if/when there are symbolic links in or below $config_directory. The problem is that the symlink may point to any location including a file under an unsafe directory such as /var/tmp or /home/u

Patch: eliminate postfix-script warnings about symlinks

2018-09-05 Thread Luc Pardon
Hello, Running Postfix 3.3.1 under Linux, postfix-script produces pointless warnings if/when there are symbolic links in or below $config_directory. 1. I installed (CA root) certificates in a subdir of /etc/postfix and rehash with "openssl rehash . This will of course create a symlink to each cer