Postfix seems to be sending out the database name and prefix

I installed Postfix on a Debian LAMP server to allow PHP to send emails from the web applications. I did minimal configuration; I only put in the domain to use when it asked.

The "Message-ID" in the email source contains the name of the database and the prefix used by the tables. This isn't technically a vulnerability, but it's undesirable.

1 Reply

Odd, according to the documentation, the Message-ID should be either YYYYMMDDHHMMSS.queueid@myhostname or queueID@myhostname based on the setting of enablelongqueue_ids. Is this information that's leaking possibly contained in myhostname?

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct