leap_platform.git/puppet/modules/site_postfix/manifests/mx, branch 0.3.0rc4

certtool-postfix-gendh attempted before postfix is installed (Bug #4340)

2013-10-31T15:12:43+00:00

Change-Id: I4ffb5b9203741d1152dfd93ef9ecc45f6a6088d4

require postfix is installed before installing postfix-pcre (#4223)

2013-10-31T15:12:43+00:00

Change-Id: I547b99becb8b16fec0ac89f06fb6d833cbde3c2b

class moved but forgot to rename

2013-10-11T20:08:07+00:00

move site_config::checks to site_config::mx::checks

2013-10-11T15:54:38+00:00

fix site_postfix::mx::reserved_aliases class name and package array

2013-10-10T16:14:24+00:00

setup email account 'blacklist' by configuring reserved aliases, effectively implementing RFC2142 and more (#3602)

2013-10-10T01:05:25+00:00

Change-Id: Ic2765b25ff9e1560def4900a1bf38dc8023b0ffa

It turns out postfix's variable for 1024bit DH parameters can actually take a file of arbitrary length (#4012)

2013-10-06T21:31:38+00:00

 Neither Postfix nor OpenSSL actually care about the size of the prime in
 "smtpd_tls_dh1024_param_file".  You can make it 2048 bits

Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5

only use TLSv1 or later for smtp (Feature #4011)

2013-10-06T21:31:16+00:00

Disable on the client-side with postfix (smtp) SSLv2/SSLv3 and only allow for TLSv1 or later

SMTP servers almost universally support TLSv1. There are very few servers that don't (the few that are would result sending in the clear for these, but the alternative isn't much better). This is unlikely to cause any significant problems.

Change-Id: I8f98ba32973537905b71f63b100f41a420b6aa3f

Merge branch 'feature/3953' into develop

2013-10-03T17:53:27+00:00

It turns out postfix's variable for 1024bit DH parameters can actually take a file of arbitrary length (#4012)

2013-10-03T17:50:14+00:00

 Neither Postfix nor OpenSSL actually care about the size of the prime in
 "smtpd_tls_dh1024_param_file".  You can make it 2048 bits

Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5