Mercurial > repos > other > Puppet
changeset 333:8d8dd5c4ec0e
Check sender access earlier to allow whitelisting
This is important for some hosts who send from a domain that
doesn't have DNS, but that we want to allow
| author | IBBoard <dev@ibboard.co.uk> |
|---|---|
| date | Sun, 15 Mar 2020 16:51:56 +0000 |
| parents | 7198cc4397d8 |
| children | ee4760967d2f |
| files | modules/postfix/templates/main.cf.epp |
| diffstat | 1 files changed, 2 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/modules/postfix/templates/main.cf.epp Sun Mar 15 16:51:11 2020 +0000 +++ b/modules/postfix/templates/main.cf.epp Sun Mar 15 16:51:56 2020 +0000 @@ -67,8 +67,8 @@ recipient_bcc_maps = hash:/etc/postfix/recipient_bcc smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_whitelist, permit -smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit -smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, check_policy_service unix:private/policy +smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, check_sender_access hash:/etc/postfix/sender_access, reject_unknown_sender_domain, permit +smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, check_sender_access hash:/etc/postfix/sender_access, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, check_policy_service unix:private/policy smtpd_data_restrictions = reject_unauth_pipelining transport_maps = hash:/etc/postfix/transport message_size_limit = 15000000