From 4a841439606768e8b8783f4a1bd32096a7bbcd9c Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 4 Apr 2018 16:20:03 +0200
Subject: Harden anti spam on the MX:es.

---
 roles/MX/tasks/main.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'roles/MX/tasks')

diff --git a/roles/MX/tasks/main.yml b/roles/MX/tasks/main.yml
index bd6f088..78362ca 100644
--- a/roles/MX/tasks/main.yml
+++ b/roles/MX/tasks/main.yml
@@ -17,6 +17,7 @@
   with_items:
     - main.cf
     - master.cf
+    - access-list.cidr
   notify:
     - Reload Postfix
 
@@ -61,6 +62,14 @@
             owner=root group=root
             mode=0644
 
+- name: Copy recipient access(5) map
+  copy: src=etc/postfix/reject-unknown-client-hostname.cf
+            dest=/etc/postfix-{{ postfix_instance[inst].name }}/reject-unknown-client-hostname.cf
+            owner=root group=root
+            mode=0644
+  notify:
+    - Reload Postfix
+
 - name: Compile the Postfix transport maps
   # trivial-rewrite(8) is a long-running process, so it's safer to reload
   postmap: instance={{ postfix_instance[inst].name }}
-- 
cgit v1.2.3