summaryrefslogtreecommitdiffstats
path: root/roles/out/templates
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2018-04-04 16:11:20 +0200
committerGuilhem Moulin <guilhem@fripost.org>2018-04-04 16:11:20 +0200
commitb5a0be7a37e1bbc1aef2a7d1844a1da4aec5634f (patch)
tree6db47371993c0f9957b7ee8cd04c49a01df50590 /roles/out/templates
parent779fc904868bb2bc3f5f73cfd225ec7655ba14cf (diff)
Perform recipient address verification on the MSA itself.
Diffstat (limited to 'roles/out/templates')
-rw-r--r--roles/out/templates/etc/postfix/main.cf.j26
1 files changed, 0 insertions, 6 deletions
diff --git a/roles/out/templates/etc/postfix/main.cf.j2 b/roles/out/templates/etc/postfix/main.cf.j2
index 2ba0a34..7167b14 100644
--- a/roles/out/templates/etc/postfix/main.cf.j2
+++ b/roles/out/templates/etc/postfix/main.cf.j2
@@ -40,51 +40,45 @@ recipient_delimiter = +
relay_domains =
relay_transport = error:5.3.2 Relay Transport unavailable
# All header rewriting happens upstream
local_header_rewrite_clients =
smtp_tls_security_level = may
smtp_tls_ciphers = medium
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache
smtpd_tls_security_level = none
strict_rfc821_envelopes = yes
smtpd_delay_reject = yes
disable_vrfy_command = yes
-address_verify_sender = $double_bounce_sender@noreply.$mydomain
-address_verify_sender_ttl = 24h
-unverified_recipient_defer_code = 250
-unverified_recipient_reject_code = 550
-
smtpd_client_restrictions =
permit_mynetworks
# We are the only ones using this proxy, but if things go wrong we
# want to know why
defer
smtpd_helo_required = yes
smtpd_helo_restrictions =
reject_invalid_helo_hostname
smtpd_sender_restrictions =
reject_non_fqdn_sender
smtpd_relay_restrictions =
reject_non_fqdn_recipient
reject_unknown_recipient_domain
- reject_unverified_recipient
permit_mynetworks
reject
smtpd_data_restrictions =
reject_unauth_pipelining
content_filter = amavisfeed:[127.0.0.1]:10040
# vim: set filetype=pfmain :