[pfx] Re: SMTP Smuggling short & long term fixes

2023-12-20 Thread Viktor Dukhovni via Postfix-users
On Wed, Dec 20, 2023 at 05:48:43PM -0500, Wietse Venema via Postfix-users wrote: > Wietse Venema via Postfix-users: > > As part of a non-responsible disclosure process, SEC Consult has > > published an email spoofing attack that involves a composition of > > different mail service behaviors with r

[pfx] Re: SMTP Smuggling short & long term fixes

2023-12-20 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > As part of a non-responsible disclosure process, SEC Consult has > published an email spoofing attack that involves a composition of > different mail service behaviors with respect to broken line endings. Also on-line at httpps://www.postfix.org/smtp-smuggling.ht

[pfx] Re: SMTP Smuggling short & long term fixes

2023-12-20 Thread Linkcheck via Postfix-users
Thanks, Bill. That did it. :) ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SMTP Smuggling short & long term fixes'

2023-12-20 Thread Linkcheck via Postfix-users
I assumed it should be in main.cf. I meant which section. I tried to redefine it in smtpd_helo_restrictions since that seemed reasonable. Running postconf shows it, as you say set to no but I cannot set it to yes. -- Dave Stiles Linkcheck Bristol Web Design Tel: 0117 9248413 https://www.bristolw

[pfx] Re: SMTP Smuggling short & long term fixes'

2023-12-20 Thread Wietse Venema via Postfix-users
Linkcheck via Postfix-users: > On 20/12/2023 3:51 pm, Wietse Venema via Postfix-users wrote: > > "smtpd_forbid_unauth_pipelining = yes > > I tried that (3.7.6) and got... > warning: unknown smtpd restriction: "smtpd_forbid_unauth_pipelining" > > Where should I have placed it? Ask your vendor. Th

[pfx] Re: SMTP Smuggling short & long term fixes

2023-12-20 Thread Linkcheck via Postfix-users
On 20/12/2023 3:51 pm, Wietse Venema via Postfix-users wrote: "smtpd_forbid_unauth_pipelining = yes I tried that (3.7.6) and got... warning: unknown smtpd restriction: "smtpd_forbid_unauth_pipelining" Where should I have placed it? ___ Postfix-user