diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2013-12-01 16:35:46 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:50:59 +0200 |
| commit | 1387b69c898cb93fd0343603f92670b40b88eb04 (patch) | |
| tree | e2b9257e0031d13812b60a3c085f7ea4882f0a20 /roles/common/templates/etc/postfix | |
| parent | 5c7776d957e9396a481066e1d9cf1acd78b52fe6 (diff) | |
Use a dedicated SMTP port for samhain.
It's unfortunate that samhain cannot use the sendmail binary, and wants
to use a inet socket instead. We use a custom port to avoid
conflicts with the usual SMTP port the MX:es need to listen on.
See also: /usr/share/doc/samhain/TODO.Debian
Diffstat (limited to 'roles/common/templates/etc/postfix')
| -rw-r--r-- | roles/common/templates/etc/postfix/main.cf.j2 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/roles/common/templates/etc/postfix/main.cf.j2 b/roles/common/templates/etc/postfix/main.cf.j2 index 3169ac6..0922b49 100644 --- a/roles/common/templates/etc/postfix/main.cf.j2 +++ b/roles/common/templates/etc/postfix/main.cf.j2 @@ -43,6 +43,10 @@ relayhost = [outgoing.fripost.org]:2525 smtpd_tls_security_level = none smtp_tls_security_level = none +# Turn off all TCP/IP listener ports except that dedicated to +# samhain(8), which sadly cannot use pickup through the sendmail binary. +master_service_disable = !16132.inet inet + {% set multi_instance = False %} {%- for g in postfix_instance.keys() | sort -%} {%- if g in group_names -%} |