Re: ALPACA writeup

2021-08-10 Thread Mono DHS
Hello, On 2021-08-10, at 07:39 (UTC-0700), Stephen Satchell had the following to say: : On 8/10/21 7:00 AM, Mono DHS wrote: : > Are there plans to revisit the SMTP command parsing and handling logic : > in the server in one form or another? Are people making acti

Re: EHLO argument validation

2021-08-10 Thread Mono DHS
Hello, On 2021-08-09, at 16:33 (UTC+0200), Matus UHLAR - fantomas had the following to say: : I don't know where you got that address is not allowed in helo/ehlo - it is. The (current) standard says that it is for EHLO and it is not for HELO [1]. Thanks, Mono [1]

Re: ALPACA writeup

2021-08-10 Thread Mono DHS
Hello again, On 2021-08-09, at 09:39 (UTC-0400), Wietse Venema had the following to say: : There was a Postfix-users thread that led to this. : https://marc.info/?t=11012289581=1=2 Uh, oh. The example conversation is noteworthy for two reasons. First, upon receiving input consisting of

Re: ALPACA writeup

2021-08-09 Thread Mono DHS
Hello, On 2021-08-09, at 09:39 (UTC-0400), Wietse Venema had the following to say: : > Haven't seen anything even remotely concerning HTTP in any SMTP standard. : : You assume that clients will adhere to the SMTP standard. Oh, no, I assume that we speak SMTP when it is agreed upon to do so,

Re: ALPACA writeup

2021-08-09 Thread Mono DHS
Hello, On 2021-08-03, at 14:11 (UTC-0400), Wietse Venema had the following to say: : > Just wondering, did you add the anti-http stuff because of ALPACA or was it already there? : > : : Postfix 2.2 added both the GET etc. configurable forbidden word : list and header detection (changelog says

Re: EHLO argument validation

2021-08-09 Thread Mono DHS
Hello, On 2021-08-08, at 10:25 (UTC-0400), Wietse Venema had the following to say: : Mono DHS: : : Checking application/pgp-signature: FAILURE Perhaps hkps://keyserver.ubuntu.com might help. Key servers are the bane of OpenPGP. I don't own/control the domain of the email address I am

Re: EHLO argument validation

2021-08-08 Thread Mono DHS
Hello, On 2021-08-08, at 16:13 (UTC+0200), Matus UHLAR - fantomas had the following to say: : are you searching for disabling particular strings in helo/ehlo command? No, I would like to validate the argument to the EHLO command (actually, to both the EHLO and HELO commands, but see below).

EHLO argument validation

2021-08-08 Thread Mono DHS
Hello all, RFC 5321, in section 4.1.1.1, states that a valid argument to the EHLO command is either a ⟨Domain⟩ or an ⟨address-literal⟩. Postfix allows the adminstrator to selectively control access to the SMTP server either by ⟨Domain⟩ via the check_helo_access , the check_helo_mx_access or

Address rewriting v Virtual alias domains

2021-06-15 Thread Mono DHS
Hello all, I would like to implement rewriting of envelope recipient addresses as they are recieved by smtpd(8) prior to the respective message being fed into "the queue", based solely on the form of the envelope recipient addresses in question. So far, I was able to figure out that to accomplish