mix/selfpost
1
0
Fork 0
Code Issues Pull Requests Actions 8 Packages Projects Releases Wiki Activity

Compare commits

base: mix/selfpost:0f984ff8d808af1cd206b9012360e023ad19130b
Branches Tags
mix/selfpost:main
mix/selfpost:v2.0.0 mix/selfpost:v1.3.0 mix/selfpost:v1.0.0
...
compare: mix/selfpost:a8b6276b0dce04688516dc422087952213892957
Branches Tags
mix/selfpost:main
mix/selfpost:v2.0.0 mix/selfpost:v1.3.0 mix/selfpost:v1.0.0
2 Commits
0f984ff8d8 ... a8b6276b0d
Author SHA1 Message Date
mixandClaude Opus 5.5 a8b6276b0d audit: stage 2c - the inventory of what SelfPost assumes of other programs
test / test (push) Canceled after 0s
Details 
docs/assumptions-2026-10-14.md: four read-only readings of the tree at
0f984ff (log tailer/Health/cmd/panel; milters/postfix/app/domain;
build/deploy/inbound/DMARC/backup/e2e; store/web and the claims of
architecture, security and guide), each place rated by what justifies it
today. 621 entries: 3 cited, 25 measured, 535 guessed, 58 with a reason to
think them false - among them expiry (Postfix logs status=expired once per
message, without to=, so expired rows stay deferred), the sender check
accepting a From: any key lists while Postfix takes the first key found,
cleanup capping inbound mail at main.cf's 10240000 bytes, and the
milter-reject line carrying sasl_username after all.

Sources read: the Debian bookworm packages the image installs (apt-get
source), go-milter v0.4.1 and modernc v1.60.1 from the module cache.
Next: the answers, entry by entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-14 19:03:22 +03:00
mixandClaude Opus 5.5 811055d4c0 development: the rule's example cites the function Postfix really has 
The example comment named check_sender_login() and strcasecmp; Postfix
3.7.11 compares the login in reject_auth_sender_login_mismatch() with
strcasecmp_utf8 (src/smtpd/smtpd_check.c:3913, 3936). Found by the
heuristics inventory - the rule's own example was written from memory.
Says where the Debian sources are fetched from and kept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-14 18:58:04 +03:00
2 changed files with 2108 additions and 2 deletions
Expand all files Collapse all files
docs/assumptions-2026-10-14.md
+2099
View File
File diff suppressed because it is too large Load Diff
docs/development.md
+9 -2
View File
@@ -227,10 +227,17 @@ what it relies on and where that is written, for the version the image runs
(the Debian bookworm package, not upstream's head): (the Debian bookworm package, not upstream's head):
```go ```go
// Postfix 3.7.11, src/smtpd/smtpd_check.c, check_sender_login(): // Postfix 3.7.11, src/smtpd/smtpd_check.c,
// the SASL login is compared with the sender map's owners by strcasecmp. // reject_auth_sender_login_mismatch(): the SASL login is compared with
// each owner in sender_login_maps by strcasecmp_utf8.
``` ```
The Debian sources of the image's versions are fetched with `apt-get source`
inside a `debian:bookworm` container (`postfix`, `opendkim`, `cyrus-sasl2`,
`supervisor`, `logrotate`); `dev/upstream/` (not in git) is where they are
kept for reading. Go modules are read in the module cache at the version
`go.mod` pins.
A document instead of source: its URL and section. Where neither answers the A document instead of source: its URL and section. Where neither answers the
question, the comment says so and what was measured instead - "measured on question, the comment says so and what was measured instead - "measured on
the e2e stand, 2026-10-14: ..." - and a measurement is never written as if the e2e stand, 2026-10-14: ..." - and a measurement is never written as if