bedah/ansible
1
0
Fork 0
forked from infra/ansible
Code Issues Pull Requests Releases Wiki Activity

Update mail configs (greylisting, minor fixes).

Browse Source
This commit is contained in:
Markus 2016-04-08 07:42:21 +02:00
parent 090fad6a01
commit 838a98f7e3
3 changed files with 7 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/mail/tasks/main.yml
View File

@ -143,7 +143,7 @@
- default/spamassassin - default/spamassassin
- name: Configure certificate manager - name: Configure certificate manager
template: src=certs.j2 dest=/etc/acme/domains.d/{{ ansible_fqdn }}_mail.conf template: src=certs.j2 dest=/etc/acme/domains.d/{{ mail_server }}_mail.conf
- name: Configure certificate manager for mailman - name: Configure certificate manager for mailman
template: src=mailman/certs.j2 dest=/etc/acme/domains.d/{{ mailman_domain }}_mailman.conf template: src=mailman/certs.j2 dest=/etc/acme/domains.d/{{ mailman_domain }}_mailman.conf

13
roles/mail/templates/postfix/main.cf.j2
View File

@ -58,19 +58,16 @@ smtpd_helo_restrictions = permit_mynetworks
smtpd_recipient_restrictions = permit_mynetworks smtpd_recipient_restrictions = permit_mynetworks
permit_sasl_authenticated permit_sasl_authenticated
reject_unauth_destination reject_unauth_destination
reject_rbl_client sbl.spamhaus.org
reject_rbl_client cbl.abuseat.org
check_recipient_access hash:/etc/postfix/recipient_access check_recipient_access hash:/etc/postfix/recipient_access
smtpd_data_restrictions = warn_if_reject reject_unauth_pipelining smtpd_data_restrictions = warn_if_reject reject_unauth_pipelining
smtpd_restriction_classes = rbl, rblgrey smtpd_restriction_classes = greylisting
rbl = reject_rbl_client sbl.spamhaus.org greylisting = check_policy_service unix:private/spfpolicy
reject_rbl_client cbl.abuseat.org check_policy_service inet:127.0.0.1:10023
rblgrey = reject_rbl_client sbl.spamhaus.org
reject_rbl_client cbl.abuseat.org
check_policy_service unix:private/spfpolicy
check_policy_service inet:127.0.0.1:10023
content_filter = amavis:[127.0.0.1]:10024 content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings receive_override_options = no_address_mappings

3
roles/mail/templates/postfix/master.cf.j2
View File

@ -119,8 +119,7 @@ bsmtp unix - n n - - pipe
scalemail-backend unix - n n - 2 pipe scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}
${nexthop} ${user}
# dovecot # dovecot
dovecot unix - n n - - pipe dovecot unix - n n - - pipe