public
/
mail-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Submission restrictions ought to be different?

This commit is contained in:
niten 2023-09-27 13:47:38 -07:00
parent 84a80feaf4
commit d46242a4b6
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
postfix.nix
View File

@ -267,6 +267,20 @@ in {
cfg.blacklist.dns) cfg.blacklist.dns)
++ [ "permit_mynetworks" "permit_sasl_authenticated" "reject" ]; ++ [ "permit_mynetworks" "permit_sasl_authenticated" "reject" ];
submission-recipient-restrictions = [
"reject_unknown_sender_domain"
"reject_unknown_recipient_domain"
"reject_unauth_pipelining"
"reject_unauth_destination"
"reject_invalid_hostname"
"reject_non_fqdn_hostname"
"reject_non_fqdn_sender"
"reject_non_fqdn_recipient"
"permit_mynetworks"
"permit_sasl_authenticated"
"reject"
];
client-restrictions = client-restrictions =
[ "permit_sasl_authenticated" "permit_mynetworks" "reject" ]; [ "permit_sasl_authenticated" "permit_mynetworks" "reject" ];
@ -448,7 +462,7 @@ in {
smtpd_client_restrictions = makeRestrictionsList client-restrictions; smtpd_client_restrictions = makeRestrictionsList client-restrictions;
smtpd_sender_restrictions = makeRestrictionsList sender-restrictions; smtpd_sender_restrictions = makeRestrictionsList sender-restrictions;
smtpd_recipient_restrictions = smtpd_recipient_restrictions =
makeRestrictionsList recipient-restrictions; makeRestrictionsList submission-recipient-restrictions;
cleanup_service_name = "submission-header-cleanup"; cleanup_service_name = "submission-header-cleanup";
}; };
@ -466,7 +480,7 @@ in {
smtpd_client_restrictions = makeRestrictionsList client-restrictions; smtpd_client_restrictions = makeRestrictionsList client-restrictions;
smtpd_sender_restrictions = makeRestrictionsList sender-restrictions; smtpd_sender_restrictions = makeRestrictionsList sender-restrictions;
smtpd_recipient_restrictions = smtpd_recipient_restrictions =
makeRestrictionsList recipient-restrictions; makeRestrictionsList submission-recipient-restrictions;
cleanup_service_name = "submission-header-cleanup"; cleanup_service_name = "submission-header-cleanup";
}; };