starred/modoboa-modoboa

Fork 0

mirror of https://github.com/modoboa/modoboa.git synced 2026-04-25 08:56:02 +03:00

[GH-ISSUE #614] Support Postfix SMTP TLS Policy Maps #575

New issue

Open

opened 2026-02-27 11:12:27 +03:00 by kerem · 5 comments

kerem commented

2026-02-27 11:12:27 +03:00

Owner

Originally created by @SomeGeek on GitHub (Oct 16, 2014).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/614

This adds the ability to define per-domain mail security settings

Originally created by @SomeGeek on GitHub (Oct 16, 2014). Original GitHub issue: https://github.com/modoboa/modoboa/issues/614 - This adds the ability to define per-domain mail security settings

kerem added the

enhancement

security

labels

2026-02-27 11:12:27 +03:00

kerem commented

2026-02-27 11:12:28 +03:00

Author

Owner

@Arvedui commented on GitHub (Oct 16, 2014):

do you really think it's a good idea, to give a public accessible process access to your server config?

@Arvedui commented on GitHub (Oct 16, 2014): do you really think it's a good idea, to give a public accessible process access to your server config?

kerem commented

2026-02-27 11:12:28 +03:00

Author

Owner

@SomeGeek commented on GitHub (Oct 16, 2014):

It's not public access. You need to be authenticated. But it's a great idea to restrict the admin panel access...

Edit: We could make a command-line tool for it, instead providing panel access.

@SomeGeek commented on GitHub (Oct 16, 2014): It's not public access. You need to be authenticated. But it's a great idea to restrict the admin panel access... Edit: We could make a command-line tool for it, instead providing panel access.

kerem commented

2026-02-27 11:12:28 +03:00

Author

Owner

@Arvedui commented on GitHub (Oct 16, 2014):

modoboa needs write access to important config files for this to work.
neither dovecot nor postfix are intended to be used this way, postfix does not even have in include directive.

there is now way to implement this secure, a privilege escalation or a auth bug and compromising the configuration would not longer be a paranoid imagination.

besides it isn't realy a problem, to adjust the settings through SSH …

@Arvedui commented on GitHub (Oct 16, 2014): modoboa needs write access to important config files for this to work. neither dovecot nor postfix are intended to be used this way, postfix does not even have in include directive. there is now way to implement this secure, a privilege escalation or a auth bug and compromising the configuration would not longer be a paranoid imagination. besides it isn't realy a problem, to adjust the settings through SSH …

kerem commented

2026-02-27 11:12:28 +03:00

Author

Owner

@tonioo commented on GitHub (Oct 16, 2014):

Indeed, this feature can become harmful. What about supporting this feature indeed:
http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps

By the way, postconf let you modify the configuration.

@tonioo commented on GitHub (Oct 16, 2014): Indeed, this feature can become harmful. What about supporting this feature indeed: http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps By the way, postconf let you modify the configuration.

kerem commented

2026-02-27 11:12:28 +03:00

Author

Owner

@SomeGeek commented on GitHub (Oct 16, 2014):

Modoboa allready handles mailboxes (as in: file system operations), so when it comes to privilege escalation, evil things can allready be done. With the proposed packaging system security fixes can be deployed more rapidly allready.

@tonioo: You're right. I'll change the issue.

@SomeGeek commented on GitHub (Oct 16, 2014): Modoboa allready handles mailboxes (as in: file system operations), so when it comes to privilege escalation, evil things can allready be done. With the proposed packaging system security fixes can be deployed more rapidly allready. @tonioo: You're right. I'll change the issue.