From b5023b36a1f6628865cb42b4353bd2ddde0ea9f4 Mon Sep 17 00:00:00 2001
From: Antoine Eiche <lewo@abesis.fr>
Date: Wed, 27 Dec 2023 09:46:26 +0100
Subject: postfix: exclude $mynetwork from smtpd_forbid_bare_newline

---
 mail-server/postfix.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix
index 4967e2d..c050736 100644
--- a/mail-server/postfix.nix
+++ b/mail-server/postfix.nix
@@ -309,7 +309,9 @@ in
         milter_protocol = "6";
         milter_mail_macros = "i {mail_addr} {client_addr} {client_name} {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}";
 
+        # Fix for https://www.postfix.org/smtp-smuggling.html
         smtpd_forbid_bare_newline = cfg.smtpdForbidBareNewline;
+        smtpd_forbid_bare_newline_exclusions = "$mynetworks";
       };
 
       submissionOptions = submissionOptions;
-- 
cgit v1.2.3