From: Jude Nagurney Date: Sun, 7 Sep 2014 04:30:02 +0000 (-0400) Subject: ! too much spam ! X-Git-Url: https://pwan.org/git/?a=commitdiff_plain;h=68357a041147937852c9c872c244d9bc732a2294;p=hgr.git ! too much spam ! --- diff --git a/manifests/postfix.pp b/manifests/postfix.pp index 506af5c..9bee275 100644 --- a/manifests/postfix.pp +++ b/manifests/postfix.pp @@ -34,6 +34,14 @@ class hgr::postfix { mode => "0644", notify => Service["postfix"], require => [Package["postfix","spamassassin"]]; + # TODO: need to run portmap on this file after updating it / before restarting postfix + "/etc/postfix/send_access": + ensure => present, + owner => "root", + group => "root", + mode => "0644", + notify => Service["postfix"], + require => Package["postfix"]; "/etc/procmailrc": ensure => present, source => "puppet:///modules/hgr/procmailrc", @@ -41,8 +49,6 @@ class hgr::postfix { group => "root", mode => "0644", require => Package["procmail"]; - - } service { @@ -51,8 +57,4 @@ class hgr::postfix { enable => true, require => Package["postfix"]; } - - - - } diff --git a/templates/postfix/main.cf.erb b/templates/postfix/main.cf.erb index bfc7bb0..4710d59 100644 --- a/templates/postfix/main.cf.erb +++ b/templates/postfix/main.cf.erb @@ -61,5 +61,7 @@ smtpd_recipient_restrictions = reject_unauth_pipelining, permit_mynetworks, reject_non_fqdn_recipient, reject_unknown_recipient_domain, - reject_unauth_destination + reject_unauth_destination, + reject_rbl_client sbl-xbl.spamhaus.org, + check_sender_access hash:/etc/postfix/sender_access relay_domains = <%= scope.lookupvar('::fqdn') %>