Mercurial > repos > other > Puppet
view modules/postfix/templates/main.cf.erb @ 16:aa5b200da1c6
Add another Postfix blacklist, check HELO for blacklisting, and tweak pipelining issue
author | IBBoard <dev@ibboard.co.uk> |
---|---|
date | Sat, 24 Jan 2015 16:20:10 +0000 |
parents | e56e2ffeaf1d |
children | bddd6c3a3e8c |
line wrap: on
line source
data_directory = /var/lib/postfix queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix myhostname = <%= @mailserver %> myorigin = $mydomain inet_interfaces = all mydestination = $myhostname, localhost.$mydomain, localhost unknown_local_recipient_reject_code = 550 mynetworks = 127.0.0.0/8 relay_domains = alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix setgid_group = postdrop html_directory = no manpage_directory = /usr/share/man smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes policy_time_limit = 3600 smtpd_tls_received_header = yes smtpd_tls_security_level = may smtpd_tls_auth_only = no smtpd_tls_loglevel = 0 smtpd_tls_ciphers = high smtpd_tls_exclude_ciphers = aNULL, MD5 smtpd_tls_protocols = !SSLv2 smtpd_tls_mandatory_ciphers = high smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5 smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_key_file = /etc/pki/custom/<%= @mailserver %>.key smtpd_tls_cert_file = /etc/pki/custom/<%= @mailserver %>.crt smtp_tls_CApath = /etc/pki/tls/certs smtp_tls_security_level = may smtp_tls_ciphers = export smtp_tls_exclude_ciphers = aNULL, MD5 smtp_tls_protocols = !SSLv2 smtp_tls_mandatory_ciphers = high smtp_tls_mandatory_exclude_ciphers = aNULL, MD5 smtp_tls_mandatory_protocols = !SSLv2 tls_preempt_cipherlist = yes smtpd_tls_eecdh_grade = strong virtual_mailbox_domains = /etc/postfix/vdomains virtual_mailbox_base = /var/mail/vhosts virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_uid_maps = static:505 virtual_gid_maps = static:505 virtual_alias_maps = hash:/etc/postfix/valias recipient_bcc_maps = hash:/etc/postfix/recipient_bcc smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_whitelist, reject_rhsbl_helo zen.spamhaus.org, permit smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, reject_rbl_client zen.spamhaus.org, reject_rbl_client b.barracudacentral.org, check_policy_service unix:private/policy smtpd_data_restrictions = reject_unauth_pipelining transport_maps = hash:/etc/postfix/transport message_size_limit = 15000000 header_checks = regexp:/etc/postfix/header_checks