From ec8af84fb1000011318e5da4384b0bb89d67dd16 Mon Sep 17 00:00:00 2001 From: Franziska Kunsmann Date: Sun, 27 Oct 2024 11:19:42 +0100 Subject: [PATCH] bundles/postfix: add devnull@myhostname mail address --- bundles/postfix/files/blocked_recipients | 2 ++ bundles/postfix/files/main.cf | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/bundles/postfix/files/blocked_recipients b/bundles/postfix/files/blocked_recipients index 736e9d4..4aff372 100644 --- a/bundles/postfix/files/blocked_recipients +++ b/bundles/postfix/files/blocked_recipients @@ -1,3 +1,5 @@ +devnull@${node.metadata.get('postfix/myhostname')} DISCARD DEV-NULL + % for address in sorted(blocked): ${address} REJECT % endfor diff --git a/bundles/postfix/files/main.cf b/bundles/postfix/files/main.cf index e0261b0..770114b 100644 --- a/bundles/postfix/files/main.cf +++ b/bundles/postfix/files/main.cf @@ -48,7 +48,7 @@ smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks reject_invalid_helo_hostname smtpd_data_restrictions = reject_unauth_pipelining -smtpd_recipient_restrictions = permit_mynetworks, check_recipient_access hash:/etc/postfix/blocked_recipients +smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blocked_recipients, permit_mynetworks smtpd_relay_before_recipient_restrictions = yes # https://ssl-config.mozilla.org/#server=postfix&version=3.7.10&config=intermediate&openssl=3.0.11&guideline=5.7