Disable pipelining to prevent bypass

3 years ago · 772e5efb7d
parent 1101e401e8
commit 772e5efb7d
1 changed files with 1 additions and 0 deletions
--- a/core/postfix/conf/master.cf
+++ b/core/postfix/conf/master.cf
@ -7,6 +7,7 @@ smtp      inet  n       -       n       -       -       smtpd
 # Internal SMTP service
 10025     inet  n       -       n       -       -       smtpd
  -o smtpd_sasl_auth_enable=yes
+  -o smtpd_discard_ehlo_keywords=pipelining
  -o smtpd_client_restrictions=$check_ratelimit,reject_unlisted_sender,reject_authenticated_sender_login_mismatch,permit
  -o smtpd_reject_unlisted_recipient={% if REJECT_UNLISTED_RECIPIENT %}{{ REJECT_UNLISTED_RECIPIENT }}{% else %}no{% endif %}
  -o cleanup_service_name=outclean