infra/ansible-role-postfix
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sender verification and virtual alias map from inventory

Browse source
This commit is contained in:
Julian Rother 2023-03-16 03:42:53 +01:00
parent 8e25214790
commit 53aeb56e54
No known key found for this signature in database
GPG key ID: 8F9B6AE9BAAE4899
6 changed files with 145 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
templates/main.cf.j2
View file

@ -69,7 +69,12 @@ smtpd_helo_restrictions = permit_mynetworks,
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain,
# reject_sender_login_mismatch, # Disabled because we don’t map correctly
{% if postfix.sender_verification.enable == 'test' -%}
warn_if_reject,
reject_authenticated_sender_login_mismatch,
{% elif postfix.sender_verification.enable -%}
reject_authenticated_sender_login_mismatch,
{% endif -%}
permit_mynetworks,
permit_sasl_authenticated
@ -91,12 +96,20 @@ mua_helo_restrictions = permit_mynetworks,
mua_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain,
{% if postfix.sender_verification.enable == 'test' -%}
warn_if_reject,
reject_authenticated_sender_login_mismatch,
{% elif postfix.sender_verification.enable -%}
reject_authenticated_sender_login_mismatch,
{% endif -%}
permit_mynetworks,
permit_sasl_authenticated
mua_client_restrictions = permit_sasl_authenticated,
reject
smtpd_sender_login_maps = {{ postfix.smtpd_sender_login_maps }}
{% if ("mailbox_transport" in postfix and postfix.mailbox_transport == "dovecot")
or postfix.ldap.enable
%}