Skynet/misc_nixos-mailserver
7
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

postfix: remove option to toggle SMTP smuggling workarounnd

Browse source 
It has been default enabled since Postfix 3.9 and can still be configured
from the NixOS option mentioned in the removal warning.

Removing the option makes our interface leaner.

Information is based on https://www.postfix.org/smtp-smuggling.html#long.
This commit is contained in:
Martin Weinelt 2025-06-13 00:18:50 +02:00
parent 8b27add088
commit f1bd4b8215
No known key found for this signature in database
GPG key ID: 87C1E9888F856759
2 changed files with 11 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

4
mail-server/postfix.nix
View file

@ -302,10 +302,6 @@ in
non_smtpd_milters = lib.mkIf cfg.dkimSigning [ "unix:/run/rspamd/rspamd-milter.sock" ];
milter_protocol = "6";
milter_mail_macros = "i {mail_addr} {client_addr} {client_name} {auth_authen}";
# Fix for https://www.postfix.org/smtp-smuggling.html
smtpd_forbid_bare_newline = cfg.smtpdForbidBareNewline;
smtpd_forbid_bare_newline_exclusions = "$mynetworks";
};
submissionOptions = submissionOptions;