summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAntoine Eiche <lewo@abesis.fr>2023-12-27 09:46:26 +0100
committerAntoine Eiche <lewo@abesis.fr>2023-12-27 09:46:26 +0100
commitb5023b36a1f6628865cb42b4353bd2ddde0ea9f4 (patch)
tree53c66c48341b2db8ceac6b2d43af3f474272b64e
parent3f526c08e8d2dc53343f5c12d4e53aecf7ea2172 (diff)
postfix: exclude $mynetwork from smtpd_forbid_bare_newline
-rw-r--r--mail-server/postfix.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix
index 4967e2d..c050736 100644
--- a/mail-server/postfix.nix
+++ b/mail-server/postfix.nix
@@ -309,7 +309,9 @@ in
milter_protocol = "6";
milter_mail_macros = "i {mail_addr} {client_addr} {client_name} {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}";
+ # Fix for https://www.postfix.org/smtp-smuggling.html
smtpd_forbid_bare_newline = cfg.smtpdForbidBareNewline;
+ smtpd_forbid_bare_newline_exclusions = "$mynetworks";
};
submissionOptions = submissionOptions;