The test tool [1] revealed that my 3.7.9 Postfix using `smtpd_forbid_bare_newline = yes` admits smuggling for the `\r\n.\n` case. One still needs `smtpd_data_restrictions = reject_unauth_pipelining` to close that one as well.
After a small adaptation to the tool to use BDAT one can see what Wietse described in [2], so one also still needs to disable chunking.
[2] https://www.mail-archive.com/[email protected]/msg100990.html _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
