# HG changeset patch # User IBBoard # Date 1422116410 0 # Node ID aa5b200da1c6a5453aead1776c05bf6b17523d1c # Parent e56e2ffeaf1d476a3aec46df4f1409d274a360e7 Add another Postfix blacklist, check HELO for blacklisting, and tweak pipelining issue diff -r e56e2ffeaf1d -r aa5b200da1c6 modules/postfix/templates/main.cf.erb --- a/modules/postfix/templates/main.cf.erb Tue Dec 02 20:45:31 2014 +0000 +++ b/modules/postfix/templates/main.cf.erb Sat Jan 24 16:20:10 2015 +0000 @@ -58,9 +58,10 @@ virtual_alias_maps = hash:/etc/postfix/valias recipient_bcc_maps = hash:/etc/postfix/recipient_bcc smtpd_helo_required = yes -smtpd_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_whitelist, permit +smtpd_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_whitelist, reject_rhsbl_helo zen.spamhaus.org, permit smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit -smtpd_recipient_restrictions = reject_unauth_pipelining, reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, reject_rbl_client zen.spamhaus.org, check_policy_service unix:private/policy +smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, reject_rbl_client zen.spamhaus.org, reject_rbl_client b.barracudacentral.org, check_policy_service unix:private/policy +smtpd_data_restrictions = reject_unauth_pipelining transport_maps = hash:/etc/postfix/transport message_size_limit = 15000000 header_checks = regexp:/etc/postfix/header_checks