diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2020-05-16 18:26:53 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2020-05-16 18:26:55 +0200 |
| commit | 2f9574850b356a746ee3ff9a8a311c450784b53c (patch) | |
| tree | b4da3e9490c148c2ec1a67e7900bc6adaa27ffb9 /roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf | |
| parent | 809a185dca11424cef6220b5314a8b7aed487164 (diff) | |
MX: Install OpenDMARC to add Authentication-Results headers.
On the infrastructure boundary. We don't reject/quarantine as it would
affect members who forward their mail sent to <user@example.com> to
<user@fripost.org>. Members can install Sieve rules to send any
messages with failed Authentication-Results headers directly in their
spambox.
Diffstat (limited to 'roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf')
| -rw-r--r-- | roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf b/roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf new file mode 100644 index 0000000..1fb5567 --- /dev/null +++ b/roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf @@ -0,0 +1,17 @@ +[Service] +Type=simple +User=opendmarc +ExecStart= +ExecStart=/usr/sbin/opendmarc -f -p fd:3 +StandardOutput=journal +SyslogFacility=mail +RuntimeDirectory=opendmarc + +# Hardening +NoNewPrivileges=yes +PrivateDevices=yes +ProtectHome=yes +ProtectSystem=strict +ProtectControlGroups=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes |