Re: postscreen and smtpd chroot

2015-11-08 Thread Wietse Venema
> I can't help but notice that > > http://www.postfix.org/POSTSCREEN_README.html#config > > suggests to disable the chroot on all new services, and notably > smtpd. Also, all socket paths (e.g. milter) have to be updated. > > Is this necessary? postscreen seems to work fine with all these > se

postscreen and smtpd chroot

2015-11-08 Thread martin f krafft
Hey folks, thanks to a hint on IRC, I started experimenting with postscreen(8) to fend off some hefty zombie attacks. I can't help but notice that http://www.postfix.org/POSTSCREEN_README.html#config suggests to disable the chroot on all new services, and notably smtpd. Also, all socket paths