34 lines
1.3 KiB
CFEngine3
34 lines
1.3 KiB
CFEngine3
#
|
|
# modify the default submission service to specify a content filter
|
|
# and restrict it to local clients and SASL authenticated clients only
|
|
#
|
|
submission inet n - n - - smtpd
|
|
-o smtpd_etrn_restrictions=reject
|
|
-o smtpd_sasl_auth_enable=yes
|
|
-o content_filter=dksign:[127.0.0.1]:10027
|
|
-o receive_override_options=no_address_mappings
|
|
-o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
|
|
|
|
#
|
|
# specify the location of the DKIM signing proxy
|
|
# Note: we allow "4" simultaneous deliveries here; high-volume sites may
|
|
# want a number higher than 4.
|
|
# Note: the smtp_discard_ehlo_keywords option requires Postfix 2.2 or
|
|
# better. Leave it off if your version does not support it.
|
|
#
|
|
dksign unix - - n - 4 smtp
|
|
-o smtp_send_xforward_command=yes
|
|
-o smtp_discard_ehlo_keywords=8bitmime,starttls
|
|
|
|
#
|
|
# service for accepting messages FROM the DKIM signing proxy
|
|
#
|
|
127.0.0.1:10028 inet n - n - 10 smtpd
|
|
-o content_filter=
|
|
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
|
|
-o smtpd_helo_restrictions=
|
|
-o smtpd_client_restrictions=
|
|
-o smtpd_sender_restrictions=
|
|
-o smtpd_recipient_restrictions=permit_mynetworks,reject
|
|
-o mynetworks=127.0.0.0/8
|
|
-o smtpd_authorized_xforward_hosts=127.0.0.0/8
|