Amavis: bind server to INADDR_LOOPBACK

1 files changed, 1 insertions, 0 deletions

diff --git a/roles/amavis/templates/etc/amavis/conf.d/50-user.j2 b/roles/amavis/templates/etc/amavis/conf.d/50-user.j2
index 7d0302a..26bcdb9 100644
--- a/roles/amavis/templates/etc/amavis/conf.d/50-user.j2
+++ b/roles/amavis/templates/etc/amavis/conf.d/50-user.j2
@@ -76,40 +76,41 @@ delete $subject_tag_maps_by_ccat{+CC_UNCHECKED};
 $enable_ldap  = 1; # Load Net::LDAP
 $default_ldap = {
     hostname      => 'ldapi://',
     sasl          => 1,
     sasl_mech     => 'EXTERNAL',
     deref         => 'never',
     timeout       => 5,
     scope         => 'one',
     base          => 'fvd=%d,ou=virtual,dc=fripost,dc=org',
     # XXX: ideally we would use %u in the base and the query_filter, but
     # it's not supported as of amavis 2.7 (see the 'lookup_ldap'
     # subroutine in /usr/sbin/amavisd-new)
     query_filter  => '(&(objectClass=amavisAccount)(ObjectClass=FripostVirtualUser)(fvl=%m))'
 };
 {% endif %}
 
 
 # http://www.ijs.si/software/amavisd/amavisd-new-docs.html#pbanks-ex
 
 $protocol = 'LMTP';
+$inet_socket_bind = ['127.0.0.1'];
 $inet_socket_port = [];
 
 {% if 'out' in group_names %}
 push @$inet_socket_port, 10040;
 $interface_policy{'10040'} = 'OUTGOING';
 {% endif %}
 {% if 'MDA' in group_names %}
 push @$inet_socket_port, 10041;
 $interface_policy{'10041'} = 'INCOMING';
 {% endif %}
 
 $QUARANTINEDIR  = "$MYHOME/virusmails";
 $notify_method  = 'smtp:[127.0.0.1]:16132'; # notifications
 $forward_method = 'smtp:[127.0.0.1]:10025'; # reinject
 $requeue_method = $notify_method;           # requeue after quarantine
 
 # some defaults for spam checking
 $sa_tag_level_deflt         = undef;
 $sa_tag2_level_deflt        = 5;
 $sa_kill_level_deflt        = 5;