From ab094d7eda4194e37c50d4674af9cbea3e64d0db Mon Sep 17 00:00:00 2001 From: Alex Denes Date: Wed, 1 Mar 2023 16:04:14 +0000 Subject: [PATCH] Fixup stuff for postfix --- config/postfix/APKBUILD | 4 ++-- config/postfix/main.cf | 4 +++- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/config/postfix/APKBUILD b/config/postfix/APKBUILD index 0945e33..43dd47b 100644 --- a/config/postfix/APKBUILD +++ b/config/postfix/APKBUILD @@ -3,7 +3,7 @@ . ../APKBUILD-config.template -pkgver=2021.08.11.02 +pkgver=2023.03.01.02 pkgrel=0 depends="postfix-pgsql redxen-secret-letsencrypt-chain redxen-secret-letsencrypt-private" @@ -42,7 +42,7 @@ package() { sha512sums=" 1cb4072b03f3e9d79b15a082ccad99fc005129b56fc42c467713520f89feef298082637fbfaa01a04c2a1b6e69a254d9018adccaf9d98a4532f067214a4035f4 master.cf -219a7e2123adfaa88a1ca8d884739789de35a9433a70b1df57f0b04c551153c737a587a2f5ef4d566cd5c68dd69a94e13ae67f4404b4449a9bd30bbb0a4df912 main.cf +7bfb44682b163619e9cdb21787a7da0244b14a30fa5d79e078637747b32f1a0457bed2e42eedd439e38de89f231be1030bf7d4f120bbe87b6b1942357b1597ac main.cf e2e2073b064a921a9eeed028e17617bcd2d1235517d908b4daadef45eb4cbb8686023c532d7938a779021cdd9548afe97f59d4c3232e7e01dca229e37e8c63ff secret 9c3ae0c3448710cb13e27cfd67864d27d364a3893ce70033df25ecd21cb0cc28a36f7d8aa9fe0cbdd0dc3516e78f34a5645a727387870d74ed8643078ec7e062 pgsql-aliases.cf 939677c0733348509a26a9ee654bc57be6cf4ce760c40cac7d1cc802afc0f7ec4b53c3752f60e9482b78290f6e36c5c8eca98645b54b34ffbb51dfbf4080d916 pgsql-users.cf diff --git a/config/postfix/main.cf b/config/postfix/main.cf index 7416409..c818bc6 100644 --- a/config/postfix/main.cf +++ b/config/postfix/main.cf @@ -43,8 +43,10 @@ smtpd_tls_security_level = may smtpd_tls_protocols = !SSLv2, !SSLv3 # Restrictions -smtpd_sender_restrictions = permit_sasl_authenticated, +smtpd_sender_restrictions = reject_known_sender_login_mismatch, + permit_sasl_authenticated, check_sender_access inline:{{$myorigin=553 not logged in}}, + reject_invalid_helo_hostname, reject_unknown_sender_domain smtpd_relay_restrictions = permit_sasl_authenticated, reject_unauth_destination