summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authoraartoni <arto7796@gmail.com>2023-12-29 16:39:06 +0100
committeraartoni <arto7796@gmail.com>2023-12-29 16:39:06 +0100
commitbcfba987e41db1a34d9900b777f16677357f82bb (patch)
tree604b1f5d1724fbebe61f1df471b281f62cfcd53f
parent9861a6af1ee3ae33a6722a7956761b84a2ab3d04 (diff)
Short-term workaround to prevent SMTP smuggling
-rw-r--r--emailwiz.sh4
1 files changed, 4 insertions, 0 deletions
diff --git a/emailwiz.sh b/emailwiz.sh
index ce8e1f5..c7d952f 100644
--- a/emailwiz.sh
+++ b/emailwiz.sh
@@ -308,6 +308,10 @@ postconf -e 'smtpd_milters = inet:localhost:12301'
postconf -e 'non_smtpd_milters = inet:localhost:12301'
postconf -e 'mailbox_command = /usr/lib/dovecot/deliver'
+# Short-term workaround to prevent SMTP smuggling
+postconf -e 'smtpd_forbid_unauth_pipelining = yes'
+postconf -e 'smtpd_discard_ehlo_keywords = chunking'
+
# A fix for "Opendkim won't start: can't open PID file?", as specified here: https://serverfault.com/a/847442
/lib/opendkim/opendkim.service.generate
systemctl daemon-reload