evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity

postfix: add spf verification to packmail config

Browse source
This commit is contained in:
Victor LABORIE 2017-10-27 12:02:27 +02:00
parent 0cdae8b246
commit 7413ebdd2b
3 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
postfix/tasks/packmail.yml
View file

@ -6,6 +6,7 @@
with_items:
- postfix
- postfix-ldap
- postfix-policyd-spf-python
- mailgraph
tags:
- postfix

3
postfix/templates/packmail_main.cf.j2
View file

@ -339,6 +339,7 @@ smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_policy_service unix:private/policyd-spf,
check_client_access hash:$config_directory/client.access_local,
check_client_access hash:$config_directory/client.access,
check_sender_access hash:$config_directory/sender.access_local,
@ -350,6 +351,8 @@ smtpd_recipient_restrictions =
reject_non_fqdn_sender,
reject_unauth_pipelining,
policyd-spf_time_limit = 3600
header_checks =
regexp:$config_directory/header_kill_local,
regexp:$config_directory/header_kill

3
postfix/templates/packmail_master.cf.j2
View file

@ -116,6 +116,9 @@ mailman unix - n n - - pipe
slow unix - - n - - smtp
policyd-spf unix - n n - 0 spawn
user=policyd-spf argv=/usr/bin/policyd-spf
dovecot unix - n n - - pipe
flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient}