stack.erp5: Disallow ip-based mail relay permission.

70dda68f · Vincent Pelletier · 1e5d8879 · 70dda68f · 70dda68f
Commit 70dda68f authored Feb 20, 2017 by Vincent Pelletier
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 1 deletion

stack/erp5/buildout.hash.cfg stack/erp5/buildout.hash.cfg +1 -1

stack/erp5/postfix_main.cf.in stack/erp5/postfix_main.cf.in +4 -0

No files found.
--- a/stack/erp5/buildout.hash.cfg
+++ b/stack/erp5/buildout.hash.cfg
@@ -63,7 +63,7 @@ md5sum = 9ac81647368068a1a98a785d08074b43

 [template-postfix-main-cf]
 filename = postfix_main.cf.in
-md5sum = 643dc1326f7d1c505237fbf588ccc585
+md5sum = 66b273861888c8bd59e46de399d2c1d8

 [template-postfix-aliases]
 filename = postfix_aliases.in

--- a/stack/erp5/postfix_main.cf.in
+++ b/stack/erp5/postfix_main.cf.in
@@ -48,6 +48,10 @@ smtpd_recipient_restrictions =
  reject_unknown_recipient_domain
  permit_sasl_authenticated
  reject
+# Do not allow mynetworks to send mails, only authenticated clients.
+smtpd_relay_restrictions =
+  permit_sasl_authenticated
+  defer_unauth_destination

 # Disable local delivery
 local_transport = error