fripost-ansible/roles/MX/templates, branch master Fripost ansible scripts Prefix ‘ipaddr’ and ‘ipv4’ with ‘ansible.utils.’. 2022-10-11T11:57:22+00:00 Guilhem Moulin guilhem@fripost.org 2022-10-11T11:24:54+00:00 a69c2e1c3c771db93d98a253192e131af40c9830 This silences the following deprecation warning: Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. 
This silences the following deprecation warning:

  Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01.
  Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
MX: Port to Debian 10. 2020-05-16T21:53:10+00:00 Guilhem Moulin guilhem@fripost.org 2020-05-16T21:45:55+00:00 d82e85eea2485925481bf12b052acede9d9ae0f8 For postfix, don't defer if "abused legit". (I.e., DBL return code in the 127.0.1.100+ range.) This used to work for Postfix 3.1.14 (Stretch) but for 3.4.8 (Buster) the 'defer_if_reject' also applies to $smtpd_relay_restrictions, to reject_unauth_destination & reject_unlisted_recipient in particular. 
For postfix, don't defer if "abused legit".  (I.e., DBL return code in
the 127.0.1.100+ range.)  This used to work for Postfix 3.1.14 (Stretch)
but for 3.4.8 (Buster) the 'defer_if_reject' also applies to
$smtpd_relay_restrictions, to reject_unauth_destination &
reject_unlisted_recipient in particular.
MX: Install OpenDMARC to add Authentication-Results headers. 2020-05-16T16:26:55+00:00 Guilhem Moulin guilhem@fripost.org 2020-05-16T16:26:53+00:00 2f9574850b356a746ee3ff9a8a311c450784b53c On the infrastructure boundary. We don't reject/quarantine as it would affect members who forward their mail sent to <user@example.com> to <user@fripost.org>. Members can install Sieve rules to send any messages with failed Authentication-Results headers directly in their spambox. 
On the infrastructure boundary.  We don't reject/quarantine as it would
affect members who forward their mail sent to <user@example.com> to
<user@fripost.org>.  Members can install Sieve rules to send any
messages with failed Authentication-Results headers directly in their
spambox.
MX: don't override 5XY reject codes to 554. 2018-12-09T19:25:39+00:00 Guilhem Moulin guilhem@fripost.org 2018-12-06T19:16:40+00:00 37d64e4a05b32599405ed824316e73aa8d0880b2 






postfix: remove explicit default 'mail_owner = postfix'.
2018-12-06T18:22:29+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-06T18:22:29+00:00

5a407e715e6efc7da24b2902913a9da58d2bd19c












Upgrade MX baseline to Debian Stretch.
2018-12-03T02:43:47+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-03T02:32:46+00:00

5d9d8aec510d894f528b21013b6d099be961faf1












Postfix: replace cdb & btree tables with lmdb ones.
2018-12-03T02:43:41+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-03T02:18:56+00:00

dcdb8cd6b1b525fc8eacd509586da3396c068251

Cf. lmdb_table(5).





Cf. lmdb_table(5).







Harden anti spam on the MX:es.
2018-06-08T22:29:09+00:00

Guilhem Moulin
guilhem@fripost.org

2018-04-04T14:20:03+00:00

4a841439606768e8b8783f4a1bd32096a7bbcd9c












Postscreen: improve DNSBL sites and scores.
2018-04-04T14:14:01+00:00

Guilhem Moulin
guilhem@fripost.org

2018-04-04T14:14:01+00:00

eb4ca347c5f597f7b018250727fb8d2b9a6d1deb












postscreen: lower zen.spamhaus.org DNSBL score from 3 to 2 on the MX:es.
2017-06-05T14:47:51+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-05T14:47:39+00:00

fb5b283d8035bdf8f6502d46f0eb12d4bb24f975

So being listed on that BL doesn't yield a flat reject if the IP isn't
also listed to other lists.





So being listed on that BL doesn't yield a flat reject if the IP isn't
also listed to other lists.