From 4a841439606768e8b8783f4a1bd32096a7bbcd9c Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 4 Apr 2018 16:20:03 +0200 Subject: Harden anti spam on the MX:es. --- roles/MX/files/etc/postfix/reject-unknown-client-hostname.cf | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 roles/MX/files/etc/postfix/reject-unknown-client-hostname.cf (limited to 'roles/MX/files/etc/postfix/reject-unknown-client-hostname.cf') diff --git a/roles/MX/files/etc/postfix/reject-unknown-client-hostname.cf b/roles/MX/files/etc/postfix/reject-unknown-client-hostname.cf new file mode 100644 index 0000000..6969f75 --- /dev/null +++ b/roles/MX/files/etc/postfix/reject-unknown-client-hostname.cf @@ -0,0 +1,10 @@ +server_host = ldapi://%2Fvar%2Fspool%2Fpostfix-mx%2Fprivate%2Fldapi/ +version = 3 +search_base = fvd=%d,ou=virtual,dc=fripost,dc=org +domain = static:all +scope = one +bind = sasl +sasl_mechs = EXTERNAL +query_filter = (&(objectClass=FripostVirtualList)(!(objectClass=FripostPendingEntry))(fvl=%u)(fripostIsStatusActive=TRUE)) +result_attribute = fvl +result_format = reject_unknown_client_hostname -- cgit v1.2.3