Skip to content

Commit

Permalink
added Postscreen
Browse files Browse the repository at this point in the history
  • Loading branch information
Ruslan Ponomarenko committed Mar 7, 2021
1 parent f8be15b commit fc9a0f8
Show file tree
Hide file tree
Showing 12 changed files with 24 additions and 6 deletions.
Empty file modified entrypoint.sh
100644 → 100755
Empty file.
Empty file modified install/buildenv.sh
100644 → 100755
Empty file.
19 changes: 18 additions & 1 deletion install/main.dist.cf
Original file line number Diff line number Diff line change
Expand Up @@ -744,6 +744,23 @@ smtp_tls_security_level = may

message_size_limit = 40960000

#Setup Postscreen
postscreen_pipelining_enable = yes
postscreen_non_smtp_command_enable = yes
postscreen_pipelining_action = drop

postscreen_dnsbl_threshold = 3
postscreen_dnsbl_action = enforce
postscreen_dnsbl_sites =
zen.spamhaus.org*3
b.barracudacentral.org=127.0.0.[2..11]*2
bl.spameatingmonkey.net*2
bl.spamcop.net

#dnsbl.sorbs.net # Issue Google IPs in spamlist



#Setup DKIM
milter_protocol = 2
milter_default_action = accept
Expand All @@ -754,4 +771,4 @@ non_smtpd_milters = unix:/run/opendkim/opendkim.sock
sender_canonical_maps = tcp:localhost:10001
sender_canonical_classes = envelope_sender
recipient_canonical_maps = tcp:localhost:10002
recipient_canonical_classes= envelope_recipient,header_recipient
recipient_canonical_classes = envelope_recipient,header_recipient
11 changes: 6 additions & 5 deletions install/master.dist.cf
Original file line number Diff line number Diff line change
Expand Up @@ -9,12 +9,13 @@
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (no) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
#smtp inet n - n - 1 postscreen
#smtpd pass - - n - - smtpd
#dnsblog unix - - n - 0 dnsblog
#tlsproxy unix - - n - 0 tlsproxy
#smtp inet n - n - - smtpd
smtp inet n - - - 1 postscreen
smtpd pass - - - - - smtpd
dnsblog unix - - n - 0 dnsblog
tlsproxy unix - - n - 0 tlsproxy
submission inet n - n - - smtpd

-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
Expand Down
Empty file modified install/postfix.sh
100644 → 100755
Empty file.
Empty file modified script/build.sh
100644 → 100755
Empty file.
Empty file modified script/clean.sh
100644 → 100755
Empty file.
Empty file modified script/devshell.sh
100644 → 100755
Empty file.
Empty file modified script/push.sh
100644 → 100755
Empty file.
Empty file modified script/run.sh
100644 → 100755
Empty file.
Empty file modified script/shell.sh
100644 → 100755
Empty file.
Empty file modified script/test.sh
100644 → 100755
Empty file.

0 comments on commit fc9a0f8

Please sign in to comment.