ISTI-ansible-roles
/
ansible-role-postfix
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add smtpd helo restrictions.

This commit is contained in:
Andrea Dell'Amico 2021-12-04 17:00:51 +01:00
parent ede10c6215
commit 0aae2ebe17
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
defaults/main.yml
View File

@ -20,6 +20,7 @@ postfix_use_relay_host: '{{ postfix_relay_client }}'
postfix_biff: "no" postfix_biff: "no"
postfix_append_dot_mydomain: "no" postfix_append_dot_mydomain: "no"
postfix_smtp_helo_required: "yes" postfix_smtp_helo_required: "yes"
postfix_helo_restrictions: True
postfix_smtp_delay_reject: "yes" postfix_smtp_delay_reject: "yes"
postfix_smtp_disable_vrfy: "yes" postfix_smtp_disable_vrfy: "yes"

8
templates/main.cf.j2
View File

@ -579,6 +579,14 @@ smtpd_milters =
{% endif %} {% endif %}
{% if postfix_smtpd_server %} {% if postfix_smtpd_server %}
{% if postfix_helo_restrictions %}
smtpd_helo_restrictions =
permit_mynetworks
reject_invalid_helo_hostname
reject_non_fqdn_helo_hostname
reject_unknown_helo_hostname
{% endif %}
smtpd_recipient_restrictions = smtpd_recipient_restrictions =
{% for recipient_rule in postfix_smtpd_server_restrictions %} {% for recipient_rule in postfix_smtpd_server_restrictions %}
{{ recipient_rule }} {{ recipient_rule }}