Mercurial > repos > other > Puppet

changeset 16:aa5b200da1c6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add another Postfix blacklist, check HELO for blacklisting, and tweak pipelining issue
author IBBoard <dev@ibboard.co.uk>
date Sat, 24 Jan 2015 16:20:10 +0000
parents e56e2ffeaf1d
children 5ba2ddf53c29
files modules/postfix/templates/main.cf.erb
diffstat 1 files changed, 3 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/modules/postfix/templates/main.cf.erb	Tue Dec 02 20:45:31 2014 +0000
+++ b/modules/postfix/templates/main.cf.erb	Sat Jan 24 16:20:10 2015 +0000
@@ -58,9 +58,10 @@
 virtual_alias_maps = hash:/etc/postfix/valias
 recipient_bcc_maps = hash:/etc/postfix/recipient_bcc
 smtpd_helo_required = yes
-smtpd_helo_restrictions  = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_whitelist, permit
+smtpd_helo_restrictions  = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_whitelist, reject_rhsbl_helo zen.spamhaus.org, permit
 smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit
-smtpd_recipient_restrictions = reject_unauth_pipelining, reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, reject_rbl_client zen.spamhaus.org, check_policy_service unix:private/policy
+smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/valias-blacklist, check_recipient_access regexp:/etc/postfix/valias-blacklist-regex, reject_rbl_client zen.spamhaus.org, reject_rbl_client b.barracudacentral.org, check_policy_service unix:private/policy
+smtpd_data_restrictions = reject_unauth_pipelining
 transport_maps = hash:/etc/postfix/transport
 message_size_limit = 15000000
 header_checks = regexp:/etc/postfix/header_checks