[pfx] SMTP Smuggling still possible after disabling pipelining

2023-12-21 Thread Till W. via Postfix-users
Dear team, we enabled smtpd_forbid_unauth_pipelining in our Postfix, but unfortunately it still accepts \n.\n (.) as EOD. This is our configuration in main.cf: smtpd_forbid_unauth_pipelining = yes smtpd_discard_ehlo_keywords = pipelining Here is an example of two emails being pipelined with .:

[pfx] Re: SMTP Smuggling still possible after disabling pipelining

2023-12-21 Thread Till W. via Postfix-users
Smuggling still possible after disabling pipelining Hey, it seems you're still offering > 250-PIPELINING Both options work as exspected on my side (Postfix 3.7.6). best regards Carsten On 21.12.23 10:29, Till W. via Postfix-users wrote: > Dear team, > we enabled smtpd_forbid_unauth_p