leap_platform.git/puppet/modules/site_postfix, branch master [leap_platform] [feat] always set smtpd_relay_restrictions 2017-02-23T09:56:21+00:00 varac varacanero@zeromail.org 2016-04-18T13:23:28+00:00 03235f93f32edf225128d24325b486531138e486 now that we deprecate wheezy, we can always set smtpd_relay_restrictions 
now that we deprecate wheezy, we can always set
smtpd_relay_restrictions
Block ip-based helo at MTA (#8139). 2016-07-19T14:44:11+00:00 Micah micah@leap.se 2016-07-12T15:20:58+00:00 bbdc193f05cb2f1624d6c7bbffd27f8060de35c8 Numeric helo is a very strong indicator of spam. When this is blocked, a very significant amount of spam stops. Change-Id: Ieb340190faf37638950d1aa60b52268659e0b7f6 
Numeric helo is a very strong indicator of spam. When this is blocked, a
very significant amount of spam stops.

Change-Id: Ieb340190faf37638950d1aa60b52268659e0b7f6
Block MTAs that claim they are 'localhost'. 2016-07-19T14:44:11+00:00 Micah micah@leap.se 2016-07-12T15:11:56+00:00 68544ba2ffdfa988c060b3b4c5bd075f7304a022 Nobody should be claiming that they are localhost when they are connecting over smtpd Change-Id: Ifb7df855b4e12021c58b89b2053e31fb10806096 
Nobody should be claiming that they are localhost when they are
connecting over smtpd

Change-Id: Ifb7df855b4e12021c58b89b2053e31fb10806096
Use DANE/TLSA validation in postfix (#8141). 2016-07-05T19:36:03+00:00 Micah micah@leap.se 2016-07-05T15:50:41+00:00 f294ddcca7fbe20de788053bfba1cc9c8417ddd8 Configure DNSSEC validation for client verification, giving us a stronger form of opportunistic TLS Change-Id: Iab92d4f593c4a5a44e3b694295096b0d7f687a37 
Configure DNSSEC validation for client verification, giving us a
stronger form of opportunistic TLS

Change-Id: Iab92d4f593c4a5a44e3b694295096b0d7f687a37
Fix matching for cleanup check. 2016-06-16T18:55:22+00:00 Micah micah@leap.se 2016-06-16T15:39:11+00:00 12b00fbf578d88281d3a00f268ffeda460d383d8 The onlyif check was incorrectly specified in the original implementation in commit id: 15b83d88dcedab496a19cef57f11c5c8e091dd4a this inverts it so it is properly detected. Change-Id: I531e206fff1ca61780adcd195e1f917011e50fb4 
The onlyif check was incorrectly specified in the original implementation in
commit id: 15b83d88dcedab496a19cef57f11c5c8e091dd4a this inverts it so it
is properly detected.

Change-Id: I531e206fff1ca61780adcd195e1f917011e50fb4
Fix opendkim milter location (#8163). 2016-06-02T16:42:10+00:00 Micah micah@leap.se 2016-06-02T16:42:10+00:00 954a746947b7395fe3252e9df371da30546ee762 The unix socket method for connecting to the milter was incorrectly reverted, this puts it back to how it should be. Change-Id: Ifde669c920a249c782f577a112f4d45e60a889a2 
The unix socket method for connecting to the milter was incorrectly
reverted, this puts it back to how it should be.

Change-Id: Ifde669c920a249c782f577a112f4d45e60a889a2
[style] lint further more 2016-04-25T19:41:20+00:00 varac varacanero@zeromail.org 2016-04-25T16:21:48+00:00 f2f2c7391056c252523730cd76ab759db9117c9c - ignore puppet lint error about inheriting from different namespace 
- ignore puppet lint error about inheriting from different namespace
Fix postfix connection to opendkim milter (#8020) 2016-04-12T18:20:22+00:00 Micah micah@leap.se 2016-04-12T13:30:44+00:00 15b83d88dcedab496a19cef57f11c5c8e091dd4a In order for postfix to access the opendkim milter socket, we need to remove the chroot option for the cleanup service. See e97a9d3800b173375a630e18e4b1aa0894eb96e1 for opendkim implementation. Change-Id: I2742650965e61273fb804ebe9ce3f9bd38796582 
In order for postfix to access the opendkim milter socket, we need to
remove the chroot option for the cleanup service.

See e97a9d3800b173375a630e18e4b1aa0894eb96e1 for opendkim
implementation.

Change-Id: I2742650965e61273fb804ebe9ce3f9bd38796582
testing: adds mx delivery tests 2016-04-05T16:52:01+00:00 elijah elijah@riseup.net 2016-03-29T20:27:01+00:00 eac3056c237d523f4786593922fe8f88eb65dff7 






Set MUA required ciphers, tighten up the mandatory protocols (#4232)
2016-03-11T20:55:20+00:00

Micah
micah@leap.se

2016-03-06T14:23:34+00:00

f69f7ca97791945d0bbe61eda84e69a8ed460e04

Change-Id: I328aa37b393817e1764ea7e635fcefc801adbbf4





Change-Id: I328aa37b393817e1764ea7e635fcefc801adbbf4