Postfix/3.7.9 - Fix SMTP smuggling attack

Author: technicalguru

Dockerfile

@@ -4,10 +4,9 @@ LABEL maintainer="Ralph Schuster <github@ralph-schuster.eu>"
 RUN echo "postfix postfix/mailname string mail.example.com" | debconf-set-selections
 RUN echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections
 
-ENV PF_VERSION="3.7.6"
+ENV PF_VERSION="3.7.9"
 ENV PF_REVISION="0"
-#ENV PF_PACKAGE="3.7.9-0+deb12u1"
-ENV PF_PACKAGE="3.7.6-0+deb12u2"
+ENV PF_PACKAGE="3.7.9-0+deb12u1"
 RUN export DEBIAN_FRONTEND=noninteractive \
     && PF_VERSION=${PF_PACKAGE} \
     && apt-get update \

README.md

@@ -14,7 +14,7 @@ Related images:
 # Tags
 The following versions are available from DockerHub. The image tag matches the Postfix version.
 
-* [3.7.6.0, 3.7.6, 3.7, 3, latest](https://github.com/technicalguru/docker-mailserver-postfix/tree/v3.7.6.0) - [Dockerfile](https://github.com/technicalguru/docker-mailserver-postfix/blob/3.7.6.0/Dockerfile)
+* [3.7.9.0, 3.7.9, 3.7, 3, latest](https://github.com/technicalguru/docker-mailserver-postfix/tree/v3.7.9.0) - [Dockerfile](https://github.com/technicalguru/docker-mailserver-postfix/blob/3.7.9.0/Dockerfile)
 * [3.5.18.0, 3.5.18, 3.5](https://github.com/technicalguru/docker-mailserver-postfix/tree/v3.5.18.0) - [Dockerfile](https://github.com/technicalguru/docker-mailserver-postfix/blob/3.5.18.0/Dockerfile)
 * [3.4.14.0, 3.4.14, 3.4](https://github.com/technicalguru/docker-mailserver-postfix/tree/v3.4.14.0) - [Dockerfile](https://github.com/technicalguru/docker-mailserver-postfix/blob/3.4.14.0/Dockerfile)
 

etc/postfix/main.cf

@@ -148,6 +148,10 @@ virtual_mailbox_maps =
 ## OTHER
 ##
 
+### SMTP smuggling
+smtpd_forbid_bare_newline = yes
+smtpd_forbid_bare_newline_exclusions = $mynetworks
+
 ### Mailbox size
 mailbox_size_limit = 0