2 parents 34a8e93 + bf52efd commit 831627eCopy full SHA for 831627e
1 file changed
templates/postfix/main.cf
@@ -68,13 +68,16 @@ smtpd_sender_restrictions =
68
reject_unknown_sender_domain,
69
permit
70
71
+# Strict relay rules to close the open relay loophole:
72
+smtpd_relay_restrictions =
73
+ reject_unauth_pipelining,
74
+ permit_mynetworks,
75
+ reject_unauth_destination
76
+
77
# Recipient restrictions:
78
smtpd_recipient_restrictions =
- reject_unauth_pipelining,
79
reject_non_fqdn_recipient,
80
reject_unknown_recipient_domain,
- permit_mynetworks,
- reject_unauth_destination,
81
{% if use_dqn %}
82
# Add in dqn RBLs
83
reject_rbl_client {{ env['POSTFIX_DQN_KEY'] }}.zen.dq.spamhaus.net=127.0.0.[2..11],
0 commit comments