summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/postfix
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2013-12-01 16:35:46 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:50:59 +0200
commit1387b69c898cb93fd0343603f92670b40b88eb04 (patch)
treee2b9257e0031d13812b60a3c085f7ea4882f0a20 /roles/common/templates/etc/postfix
parent5c7776d957e9396a481066e1d9cf1acd78b52fe6 (diff)
Use a dedicated SMTP port for samhain.
It's unfortunate that samhain cannot use the sendmail binary, and wants to use a inet socket instead. We use a custom port to avoid conflicts with the usual SMTP port the MX:es need to listen on. See also: /usr/share/doc/samhain/TODO.Debian
Diffstat (limited to 'roles/common/templates/etc/postfix')
-rw-r--r--roles/common/templates/etc/postfix/main.cf.j24
1 files changed, 4 insertions, 0 deletions
diff --git a/roles/common/templates/etc/postfix/main.cf.j2 b/roles/common/templates/etc/postfix/main.cf.j2
index 3169ac6..0922b49 100644
--- a/roles/common/templates/etc/postfix/main.cf.j2
+++ b/roles/common/templates/etc/postfix/main.cf.j2
@@ -43,6 +43,10 @@ relayhost = [outgoing.fripost.org]:2525
smtpd_tls_security_level = none
smtp_tls_security_level = none
+# Turn off all TCP/IP listener ports except that dedicated to
+# samhain(8), which sadly cannot use pickup through the sendmail binary.
+master_service_disable = !16132.inet inet
+
{% set multi_instance = False %}
{%- for g in postfix_instance.keys() | sort -%}
{%- if g in group_names -%}