From d6a5fde2f8662dfe56a2e9d137dddddb1b53475d Mon Sep 17 00:00:00 2001 From: "Patrick M. Hausen" Date: Sun, 14 Aug 2022 15:59:23 +0200 Subject: [PATCH] mail/postfix - disable GSSAPI when authenticating against smarthost (#3080) --- .../src/opnsense/service/templates/OPNsense/Postfix/main.cf | 1 + 1 file changed, 1 insertion(+) diff --git a/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf b/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf index 7ad6a1c27..5ce384efa 100644 --- a/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf +++ b/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf @@ -157,6 +157,7 @@ relayhost = {{ OPNsense.postfix.general.relayhost }} smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/usr/local/etc/postfix/smtp_auth smtp_sasl_security_options = +smtp_sasl_mechanism_filter = !gssapi, !external, static:all {% endif %} {% if helpers.exists('OPNsense.postfix.general.permit_sasl_authenticated') and OPNsense.postfix.general.permit_sasl_authenticated == '1' %}