fripost-ansible/roles/MX/handlers, branch master Fripost ansible scripts MX: Install OpenDMARC to add Authentication-Results headers. 2020-05-16T16:26:55+00:00 Guilhem Moulin guilhem@fripost.org 2020-05-16T16:26:53+00:00 2f9574850b356a746ee3ff9a8a311c450784b53c On the infrastructure boundary. We don't reject/quarantine as it would affect members who forward their mail sent to <user@example.com> to <user@fripost.org>. Members can install Sieve rules to send any messages with failed Authentication-Results headers directly in their spambox. 
On the infrastructure boundary.  We don't reject/quarantine as it would
affect members who forward their mail sent to <user@example.com> to
<user@fripost.org>.  Members can install Sieve rules to send any
messages with failed Authentication-Results headers directly in their
spambox.
Configure munin nodes & master. 2015-06-10T16:37:19+00:00 Guilhem Moulin guilhem@fripost.org 2015-06-10T13:35:13+00:00 b408390ae9311b7d703ce57c25a78dce23c31b16 Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI. 
Interhost communications are protected by stunnel4.  The graphs are only
visible on the master itself, and content is generated by Fast CGI.
Replace Postgrey with postscreen. 2015-06-07T00:53:05+00:00 Guilhem Moulin guilhem@fripost.org 2014-07-12T23:39:45+00:00 4fb4be4d279dd94cab33fc778cfa318b93d6926f See http://www.postfix.org/POSTSCREEN_README.html and http://rob0.nodns4.us/postscreen.html It's infortunate that smtpd(8) cannot be chrooted any longer, which means that we have to un-chroot cleanup(8) as well. Indeed, currently smtpd(8) uses $virtual_alias_maps for recipient validation; later cleanup(8) uses it again for rewriting. So these processes need to be both chrooted, or both not. 
See http://www.postfix.org/POSTSCREEN_README.html and
    http://rob0.nodns4.us/postscreen.html

It's infortunate that smtpd(8) cannot be chrooted any longer, which
means that we have to un-chroot cleanup(8) as well.  Indeed, currently
smtpd(8) uses $virtual_alias_maps for recipient validation; later
cleanup(8) uses it again for rewriting.  So these processes need to be
both chrooted, or both not.
Reload Postfix upon configuration change, but don't restart it. 2015-06-07T00:52:24+00:00 Guilhem Moulin guilhem@fripost.org 2014-07-03T22:37:40+00:00 58e65628313da8990f1e5cb26bfe4e10e128034e (Unless a new instance is created, or the master.cf change is modified.) Changing some variables, such as inet_protocols, require a full restart, but most of the time it's overkill. 
(Unless a new instance is created, or the master.cf change is modified.)
Changing some variables, such as inet_protocols, require a full restart,
but most of the time it's overkill.
Rename the role 'mx' into 'MX'. 2015-06-07T00:51:11+00:00 Guilhem Moulin guilhem@fripost.org 2013-12-02T22:46:01+00:00 c79f18ff9a04a7534dba3c288bc9606f17786b16 Other abreviations are upper case. 
Other abreviations are upper case.