postfix: SMTP Smuggling Protection

Enable Postfix SMTP Smuggling protection, introduced in Postfix 3.8.4,
which is, currently, only available within the nixpkgs' master branch.

- https://github.com/NixOS/nixpkgs/pull/276104
- https://github.com/NixOS/nixpkgs/pull/276264

For information about SMTP Smuggling:

- https://www.postfix.org/smtp-smuggling.html
- https://www.postfix.org/postconf.5.html#smtpd_forbid_bare_newline
This commit is contained in:
Alvar Penning 2023-12-23 20:15:16 +01:00 committed by Naïm Favier
parent 008d78cc21
commit 3f526c08e8
No known key found for this signature in database
GPG key ID: 95AFCE8211908325
2 changed files with 16 additions and 0 deletions

View file

@ -309,6 +309,7 @@ in
milter_protocol = "6";
milter_mail_macros = "i {mail_addr} {client_addr} {client_name} {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}";
smtpd_forbid_bare_newline = cfg.smtpdForbidBareNewline;
};
submissionOptions = submissionOptions;