diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2015-06-04 19:02:31 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:54:25 +0200 |
| commit | f3d93ac759ee2ac08ecc7308d3019796e2285797 (patch) | |
| tree | 21c9c8fe4247c086c5667154228b455637c5eca1 /roles/MSA/templates/etc/postfix/main.cf.j2 | |
| parent | e8514e6a5ed5677c52cceb6c526c33d9bb235355 (diff) | |
Use recipient address verification probes.
This is specially useful for mailing lists and the webmail, since it
prevents our outgoing gateway from accepting mails known to be bouncing.
However the downside is that it adds a delay of up to 6s after the
RCPT TO command.
Diffstat (limited to 'roles/MSA/templates/etc/postfix/main.cf.j2')
| -rw-r--r-- | roles/MSA/templates/etc/postfix/main.cf.j2 | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/roles/MSA/templates/etc/postfix/main.cf.j2 b/roles/MSA/templates/etc/postfix/main.cf.j2 index 800dda8..331753a 100644 --- a/roles/MSA/templates/etc/postfix/main.cf.j2 +++ b/roles/MSA/templates/etc/postfix/main.cf.j2 @@ -82,47 +82,49 @@ smtpd_tls_session_cache_database= btree:$data_directory/smtpd_tls_session_cache smtpd_tls_received_header = yes smtpd_tls_ask_ccert = yes # SASL smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = no smtpd_sasl_local_domain = smtpd_sasl_exceptions_networks = $mynetworks smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_tls_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = unix:private/dovecot-auth strict_rfc821_envelopes = yes smtpd_delay_reject = yes disable_vrfy_command = yes # UCE control -unknown_client_reject_code = 554 +unknown_client_reject_code = 554 +unverified_recipient_reject_code = 550 smtpd_client_restrictions = permit_sasl_authenticated reject smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname smtpd_sender_restrictions = reject_non_fqdn_sender reject_unknown_sender_domain smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated reject smtpd_recipient_restrictions = reject_non_fqdn_recipient reject_unknown_recipient_domain + reject_unverified_recipient smtpd_data_restrictions = reject_unauth_pipelining # vim: set filetype=pfmain : |