4 ms·

I can't tell but is postfix affected?

• actionfromafar 3y ago
  Yes, there are configuration mitigations though. Also, a patch is in the works: https://www.mail-archive.com/postfix-announce@postfix.org/msg00090.html https://www.mail-archive.com/postfix-announce@postfix.org/ms...
  • denton-scratch 3y ago
    "Mitigation" suggests that the config change makes the problem less severe. This config change is a complete fix for the problem, although for a high-volume server that handles a lot of lists, it might impact performance. Add me to the list of people who are annoyed that they didn't give due notice to the Postfix maintainers.
    • e12e 3y ago
      From the postfix post: > A short-term workaround can be deployed now, before the upcoming long holiday and associated production change freeze. > NOTE: This will stop only the published form of the attack. Other forms exist that will not be stopped in this manner.