From 474b84688e76509ee013a72f92c0b73bed27bd81 Mon Sep 17 00:00:00 2001 From: Jesse Norell <jesse@kci.net> Date: Mon, 08 Feb 2016 19:49:22 -0500 Subject: [PATCH] enable smtpd_reject_unlisted_sender and other stricter defaults --- install/tpl/debian_postfix.conf.master | 5 +++++ install/tpl/fedora_postfix.conf.master | 5 +++++ install/tpl/opensuse_postfix.conf.master | 5 +++++ install/tpl/gentoo_postfix.conf.master | 5 +++++ 4 files changed, 20 insertions(+), 0 deletions(-) diff --git a/install/tpl/debian_postfix.conf.master b/install/tpl/debian_postfix.conf.master index 5b38597..c518250 100644 --- a/install/tpl/debian_postfix.conf.master +++ b/install/tpl/debian_postfix.conf.master @@ -43,3 +43,8 @@ smtp_tls_protocols = !SSLv2,!SSLv3 smtpd_tls_exclude_ciphers = RC4, aNULL smtp_tls_exclude_ciphers = RC4, aNULL +strict_rfc821_envelopes = yes +disable_vrfy_command = yes +allow_percent_hack = no +swap_bangpath = no +smtpd_reject_unlisted_sender = yes diff --git a/install/tpl/fedora_postfix.conf.master b/install/tpl/fedora_postfix.conf.master index 63a9707..cedaa14 100644 --- a/install/tpl/fedora_postfix.conf.master +++ b/install/tpl/fedora_postfix.conf.master @@ -40,3 +40,8 @@ smtp_tls_protocols = !SSLv2,!SSLv3 smtpd_tls_exclude_ciphers = RC4, aNULL smtp_tls_exclude_ciphers = RC4, aNULL +strict_rfc821_envelopes = yes +disable_vrfy_command = yes +allow_percent_hack = no +swap_bangpath = no +smtpd_reject_unlisted_sender = yes diff --git a/install/tpl/gentoo_postfix.conf.master b/install/tpl/gentoo_postfix.conf.master index 4aed9d2..5439cc5 100644 --- a/install/tpl/gentoo_postfix.conf.master +++ b/install/tpl/gentoo_postfix.conf.master @@ -39,3 +39,8 @@ smtp_tls_protocols = !SSLv2,!SSLv3 smtpd_tls_exclude_ciphers = RC4, aNULL smtp_tls_exclude_ciphers = RC4, aNULL +strict_rfc821_envelopes = yes +disable_vrfy_command = yes +allow_percent_hack = no +swap_bangpath = no +smtpd_reject_unlisted_sender = yes diff --git a/install/tpl/opensuse_postfix.conf.master b/install/tpl/opensuse_postfix.conf.master index eed4f5f..a66536f 100644 --- a/install/tpl/opensuse_postfix.conf.master +++ b/install/tpl/opensuse_postfix.conf.master @@ -42,3 +42,8 @@ smtp_tls_protocols = !SSLv2,!SSLv3 smtpd_tls_exclude_ciphers = RC4, aNULL smtp_tls_exclude_ciphers = RC4, aNULL +strict_rfc821_envelopes = yes +disable_vrfy_command = yes +allow_percent_hack = no +swap_bangpath = no +smtpd_reject_unlisted_sender = yes -- Gitblit v1.9.1