netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

mail/postfix: add more antispam features (#1723)

Browse Source
This commit is contained in:
Michael
2020-03-10 13:23:30 +01:00
committed by GitHub
parent 48bcb85124
commit aca3e2b4db
5 changed files with 86 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mail/postfix/Makefile
+1 -1
View File
@@ -1,5 +1,5 @@
PLUGIN_NAME= postfix
PLUGIN_VERSION= 1.13
PLUGIN_VERSION= 1.14
PLUGIN_COMMENT= SMTP mail relay
PLUGIN_DEPENDS= postfix-sasl
PLUGIN_MAINTAINER= m.muenz@gmail.com
mail/postfix/pkg-descr
+3
View File
@@ -6,6 +6,9 @@ is completely different.
Plugin Changelog
================
1.14
* Add more anti-spam features into postfix itself
1.13
mail/postfix/src/opnsense/mvc/app/controllers/OPNsense/Postfix/forms/general.xml
+30
View File
@@ -150,6 +150,36 @@
<advanced>true</advanced>
<help>If you enable this, every entry in Recipients will be checked against. When there is no match mail will be rejected. Be aware that it does not matter if the action is "OK" or "REJECT". This setup allows you to run postfix in front of an internal system and already rejecting unsolicited mail at the border.</help>
</field>
<field>
<id>general.extensive_helo_restrictions</id>
<label>Advanced HELO Restrictions</label>
<type>checkbox</type>
</field>
<field>
<id>general.extensive_sender_restrictions</id>
<label>Advanced Sender Restrictions</label>
<type>checkbox</type>
</field>
<field>
<id>general.reject_unknown_client_hostname</id>
<label>Reject Unkown Client Hostname</label>
<type>checkbox</type>
</field>
<field>
<id>general.reject_non_fqdn_helo_hostname</id>
<label>Reject Non-FQDN HELO Hostname</label>
<type>checkbox</type>
</field>
<field>
<id>general.reject_invalid_helo_hostname</id>
<label>Reject Invalid HELO Hostname</label>
<type>checkbox</type>
</field>
<field>
<id>general.reject_unknown_helo_hostname</id>
<label>Reject Unkown HELO Hostname</label>
<type>checkbox</type>
</field>
<field>
<id>general.reject_unauth_pipelining</id>
<label>Reject Unauthenticated Pipelining</label>
mail/postfix/src/opnsense/mvc/app/models/OPNsense/Postfix/General.xml
+24
View File
@@ -111,6 +111,30 @@
<default>0</default>
<Required>Y</Required>
</enforce_recipient_check>
<extensive_helo_restrictions type="BooleanField">
<default>0</default>
<Required>Y</Required>
</extensive_helo_restrictions>
<extensive_sender_restrictions type="BooleanField">
<default>0</default>
<Required>Y</Required>
</extensive_sender_restrictions>
<reject_unknown_client_hostname type="BooleanField">
<default>0</default>
<Required>Y</Required>
</reject_unknown_client_hostname>
<reject_non_fqdn_helo_hostname type="BooleanField">
<default>0</default>
<Required>Y</Required>
</reject_non_fqdn_helo_hostname>
<reject_invalid_helo_hostname type="BooleanField">
<default>0</default>
<Required>Y</Required>
</reject_invalid_helo_hostname>
<reject_unknown_helo_hostname type="BooleanField">
<default>0</default>
<Required>Y</Required>
</reject_unknown_helo_hostname>
<reject_unauth_pipelining type="BooleanField">
<default>1</default>
<Required>Y</Required>
mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf
+28
View File
@@ -134,6 +134,18 @@ relay_recipient_maps = hash:/usr/local/etc/postfix/recipient_access
{% if helpers.exists('OPNsense.postfix.recipient.recipients.recipient') %}
{% do smtpd_recipient_restrictions.append('check_recipient_access hash:/usr/local/etc/postfix/recipient_access') %}
{% endif %}
{% if helpers.exists('OPNsense.postfix.general.reject_unknown_client_hostname') and OPNsense.postfix.general.reject_unknown_client_hostname == '1' %}
{% do smtpd_recipient_restrictions.append('reject_unknown_client_hostname') %}
{% endif %}
{% if helpers.exists('OPNsense.postfix.general.reject_non_fqdn_helo_hostname') and OPNsense.postfix.general.reject_non_fqdn_helo_hostname == '1' %}
{% do smtpd_recipient_restrictions.append('reject_non_fqdn_helo_hostname') %}
{% endif %}
{% if helpers.exists('OPNsense.postfix.general.reject_invalid_helo_hostname') and OPNsense.postfix.general.reject_invalid_helo_hostname == '1' %}
{% do smtpd_recipient_restrictions.append('reject_invalid_helo_hostname') %}
{% endif %}
{% if helpers.exists('OPNsense.postfix.general.reject_unknown_helo_hostname') and OPNsense.postfix.general.reject_unknown_helo_hostname == '1' %}
{% do smtpd_recipient_restrictions.append('reject_unknown_helo_hostname') %}
{% endif %}
{% if helpers.exists('OPNsense.postfix.general.reject_unauth_pipelining') and OPNsense.postfix.general.reject_unauth_pipelining == '1' %}
{% do smtpd_recipient_restrictions.append('reject_unauth_pipelining') %}
{% endif %}
@@ -168,6 +180,22 @@ smtpd_recipient_restrictions = {{ smtpd_recipient_restrictions | join(', ') }}
smtpd_helo_required = yes
{% if helpers.exists('OPNsense.postfix.general.extensive_helo_restrictions') and OPNsense.postfix.general.extensive_helo_restrictions == '1' %}
smtpd_helo_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_helo_hostname,
reject_non_fqdn_hostname,
reject_unknown_hostname
{% endif %}
{% if helpers.exists('OPNsense.postfix.general.extensive_sender_restrictions') and OPNsense.postfix.general.extensive_sender_restrictions == '1' %}
smtpd_sender_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unknown_reverse_client_hostname,
reject_unknown_sender_domain,
reject_non_fqdn_sender
{% endif %}
syslog_facility = mail
syslog_name = postfix