summaryrefslogtreecommitdiffstats
path: root/roles/MSA
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-01-14 06:51:03 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:51:35 +0200
commit650db94b3b8dc6665c3883ac29f78adfe23e03f0 (patch)
tree8fc334329381952850dda59f16a558d0159305d9 /roles/MSA
parentf8a46672a40b29f04a1a6417042759e2c25d4671 (diff)
Don't use IPSec to relay messages to localhost.
Diffstat (limited to 'roles/MSA')
-rw-r--r--roles/MSA/templates/etc/postfix/main.cf.j24
1 files changed, 4 insertions, 0 deletions
diff --git a/roles/MSA/templates/etc/postfix/main.cf.j2 b/roles/MSA/templates/etc/postfix/main.cf.j2
index 685287a..337acd1 100644
--- a/roles/MSA/templates/etc/postfix/main.cf.j2
+++ b/roles/MSA/templates/etc/postfix/main.cf.j2
@@ -64,7 +64,11 @@ header_checks = pcre:$config_directory/anonymize_sender.pcre
# Tunnel everything through IPSec
smtp_tls_security_level = none
+{% if 'MTA-out' in group_names %}
+smtp_bind_address = 127.0.0.1
+{% else %}
smtp_bind_address = 172.16.0.1
+{% endif %}
# TLS
smtpd_tls_security_level = encrypt