fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	logjam mitigation.	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade Postfix config to Jessie (MSA & outgoing proxy).	Guilhem Moulin	2015-06-07	1
\|
*	Fix $smtpd_sender_restrictions.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \| \| \| \| \| \|	On the MDA the domain is our 'mda.fripost.org', there is no need to perform an extra DNS lookup. The MSA does not perform local or virtual delivery, but relays everything to the outgoing SMTP proxy. On the MX, there is no need to check for recipient validity as we are the final destination; but unsure that the RCPT TO address is a valid recipient before doing the greylisting.
*	Tell vim the underlying filetype of templates for syntax highlighting.	Guilhem Moulin	2015-06-07	1
\|
*	Reload Postfix upon configuration change, but don't restart it.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \|	(Unless a new instance is created, or the master.cf change is modified.) Changing some variables, such as inet_protocols, require a full restart, but most of the time it's overkill.
*	Don't restart/reload Postifx upon change of a file based database.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	And don't restart or reload either upon change of pcre: files that are used by smtpd(8), cleanup(8) or local(8), following the suggestion from http://www.postfix.org/DATABASE_README.html#detect .
*	Replace IPSec tunnels by app-level ephemeral TLS sessions.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	For some reason giraff doesn't like IPSec. App-level TLS sessions are less efficient, but thanks to ansible it still scales well.
*	Outgoing SMTP proxy.	Guilhem Moulin	2015-06-07	1
\|
*	Support boken SMTP clients and LOGIN SASL mechanism.	Guilhem Moulin	2015-06-07	1
\|
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Assume a DNS entry for each role.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	E.g., ldap.fripost.org, ntp.fripost.org, etc. (Ideally the DNS zone would be provisioned by ansible, too.) It's a bit unclear how to index the subdomains (mx{1,2,3}, etc), though.
*	Don't pass the client information unless necessary.	Guilhem Moulin	2015-06-07	1
\|
*	Don't use IPSec to relay messages to localhost.	Guilhem Moulin	2015-06-07	1
\|
*	typo	Guilhem Moulin	2015-06-07	1
\|
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Configure the Mail Submission Agent.	Guilhem Moulin	2015-06-07	4