diff options
Diffstat (limited to 'roles/MX/files')
9 files changed, 164 insertions, 0 deletions
diff --git a/roles/MX/files/etc/postfix/virtual/alias_catchall_maps.cf b/roles/MX/files/etc/postfix/virtual/alias_catchall_maps.cf new file mode 100644 index 0000000..c405f47 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/alias_catchall_maps.cf @@ -0,0 +1,7 @@ +server_host = ldapi://%2Fprivate%2Fldapi/ +version = 3 +search_base = fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org +scope = base +bind = none +query_filter = (&(ObjectClass=FripostVirtualDomain)(fvd=%d)(fripostOptionalMaildrop=*)) +result_attribute = fripostOptionalMaildrop diff --git a/roles/MX/files/etc/postfix/virtual/alias_maps.cf b/roles/MX/files/etc/postfix/virtual/alias_maps.cf new file mode 100644 index 0000000..9265d0b --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/alias_maps.cf @@ -0,0 +1,6 @@ +server_host = ldapi://%2Fprivate%2Fldapi/ +version = 3 +search_base = fvl=%u,fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org +scope = base +query_filter = (&(ObjectClass=FripostVirtualAlias)(fvl=%u)) +result_attribute = fripostMaildrop diff --git a/roles/MX/files/etc/postfix/virtual/lists_maps.cf b/roles/MX/files/etc/postfix/virtual/lists_maps.cf new file mode 100644 index 0000000..b60dcf6 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/lists_maps.cf @@ -0,0 +1,7 @@ +server_host = ldapi://%2Fprivate%2Fldapi/ +version = 3 +search_base = fvl=%u,fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org +scope = base +bind = none +query_filter = (&(|(ObjectClass=FripostVirtualList)(ObjectClass=FripostVirtualListCommand))(fvl=%u)(fripostLocalAlias=%u#%d)) +result_attribute = fripostLocalAlias diff --git a/roles/MX/files/etc/postfix/virtual/mailbox_domains.cf b/roles/MX/files/etc/postfix/virtual/mailbox_domains.cf new file mode 100644 index 0000000..22d6be3 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/mailbox_domains.cf @@ -0,0 +1,8 @@ +server_host = ldapi://%2Fprivate%2Fldapi/ +version = 3 +search_base = fvd=%s,ou=virtual,o=mailHosting,dc=fripost,dc=org +scope = base +bind = none +query_filter = (&(ObjectClass=FripostVirtualDomain)(fvd=%s)) +result_attribute = fvd +result_format = OK diff --git a/roles/MX/files/etc/postfix/virtual/mailbox_maps.cf b/roles/MX/files/etc/postfix/virtual/mailbox_maps.cf new file mode 100644 index 0000000..dc97177 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/mailbox_maps.cf @@ -0,0 +1,8 @@ +server_host = ldapi://%2Fprivate%2Fldapi/ +version = 3 +search_base = fvl=%u,fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org +scope = base +bind = none +query_filter = (&(ObjectClass=FripostVirtualUser)(fvl=%u)) +result_attribute = fvl +result_format = OK diff --git a/roles/MX/files/etc/postfix/virtual/reserved_maps.pcre b/roles/MX/files/etc/postfix/virtual/reserved_maps.pcre new file mode 100644 index 0000000..58572d1 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/reserved_maps.pcre @@ -0,0 +1,5 @@ +# These reserved aliases will always be redirected to us and the domain +# owner. +# TODO: check 'postmaster+test@fripost.org' +/^(?:postmaster|abuse)(?:\+.*)?@fripost\.org$/ admin@fripost.org +/^((?:postmaster|abuse)(?:\+.*)?)@/ $1 diff --git a/roles/MX/files/etc/postfix/virtual/reserved_transport_maps b/roles/MX/files/etc/postfix/virtual/reserved_transport_maps new file mode 100644 index 0000000..dce8710 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/reserved_transport_maps @@ -0,0 +1,2 @@ +abuse reserved-alias: +postmaster reserved-alias: diff --git a/roles/MX/files/etc/postfix/virtual/transport_lists_maps.cf b/roles/MX/files/etc/postfix/virtual/transport_lists_maps.cf new file mode 100644 index 0000000..9a7bca0 --- /dev/null +++ b/roles/MX/files/etc/postfix/virtual/transport_lists_maps.cf @@ -0,0 +1,11 @@ +# Despite the index on 'fripostLocalAlias' it's a bit more inefficient, +# but more precise, than the alternative of using regexes here, and a +# plain hash on the list managers' side. +server_host = ldapi://%2Fprivate%2Fldapi/ +version = 3 +search_base = ou=virtual,o=mailHosting,dc=fripost,dc=org +scope = sub +bind = none +query_filter = (&(|(ObjectClass=FripostVirtualList)(ObjectClass=FripostVirtualListCommand))(fripostLocalAlias=%s)) +result_attribute = fripostLocalAlias +result_format = smtp:[127.0.0.1]:2345 diff --git a/roles/MX/files/usr/local/sbin/reserved-alias.pl b/roles/MX/files/usr/local/sbin/reserved-alias.pl new file mode 100755 index 0000000..c122c6d --- /dev/null +++ b/roles/MX/files/usr/local/sbin/reserved-alias.pl @@ -0,0 +1,110 @@ +#!/usr/bin/perl + +# Copyright © 2013 Guilhem Moulin <guilhem@fripost.org> +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see <http://www.gnu.org/licenses/>. + +use warnings; +use strict; +use Net::LDAPI; +use Net::LDAP::Util qw/escape_filter_value ldap_explode_dn escape_dn_value/; +use Authen::SASL; + +if (!@ARGV or grep { $_ eq '-h' or $_ eq '--help' } @ARGV) { + # Help + print STDERR "Usage: $0 [original recipient] [additional recipient ...]\n"; + print STDERR "\n"; + print STDERR "The message read from the standard input is redirected to 'additional recipient',\n"; + print STDERR "and also forwarded to the domain owner if any. If the 'additional recipient' begins\n"; + print STDERR "with '\@', the localpart of 'original recipient' is prepended.\n"; + print STDERR "\n"; + print STDERR "This is mostly useful to comply to RFC 822 section 6.3 and RFC 2142 section\n"; + print STDERR "4 (to forward mails to 'admin\@' and 'postmaster\@' to the site admin in\n"; + print STDERR "addition to the virtual domain manager).\n"; + exit; +} + +# The original recipient +my $orig = shift; +$orig =~ /^([^@]+)\@(.+)$/ + or warn "Non fully qualified: $orig"; +my ($local,$domain) = ($1,$2); + +# The new recipient (typically, the admin site) +my @recipients = grep { $_ and $orig ne $_ } + # add localparts to domain + map { my $x = $_; + if ($x =~ /^\@/) { + if ($local) { + $x = $local.$x; + } + else { + undef $x; + } + } + $x + } + @ARGV; +# Die if we can't deliver to site admins +die "Error: Aborted delivery to '$orig' in attempt to break an alias expansion loop.\n" + unless @recipients; + +my @sendmail = ('/usr/sbin/sendmail', '-i', '-bm'); + +if (defined $domain) { + # Look for the domain owner/postmaster + my $ldap = Net::LDAPI->new(); + $ldap->bind( sasl => Authen::SASL->new(mechanism => 'EXTERNAL') ) + or die "Couldn't bind"; + + my @attrs = ( 'fripostPostmaster', 'fripostOwner' ); + my $mesg = $ldap->search( base => 'fvd='.escape_dn_value($domain).',' + .'ou=virtual,o=mailHosting,dc=fripost,dc=org' + , scope => 'base' + , deref => 'never' + , filter => '(&(objectClass=FripostVirtualDomain)' + .'(fvd='.escape_filter_value($domain).')'. + ')' + , attrs => \@attrs + ); + if ($mesg->code) { + warn $mesg->error; + } + elsif ($mesg->count != 1) { + # Note: this may happen for "$mydestination", but these mails + # are unlikely. We'll get a harmless warning at worst. + warn "Something weird happened when looking up domain '".$domain. + "'. Check your ACL."; + } + else { + my $entry = $mesg->pop_entry() // die "Cannot pop entry."; + foreach (@attrs) { + my $v = $entry->get_value($_, asref => 1) or next; + foreach my $dn (@$v) { + my $dn2 = ldap_explode_dn($dn, casefold => 'lower'); + my $l = $dn2->[0]->{fvl}; + my $d = $dn2->[1]->{fvd}; + if ($l and $d) { + push @recipients, $l.'@'.$d; + } + else { + warn "Invalid DN: $dn" + } + } + } + } + $ldap->unbind; +} + +exec (@sendmail, @recipients); |