leap_platform.git/puppet/modules/site_postfix, branch subtree [leap_platform] [style] lint further more 2016-04-25T19:41:20+00:00 varac varacanero@zeromail.org 2016-04-25T16:21:48+00:00 f2f2c7391056c252523730cd76ab759db9117c9c - ignore puppet lint error about inheriting from different namespace 
- ignore puppet lint error about inheriting from different namespace
Fix postfix connection to opendkim milter (#8020) 2016-04-12T18:20:22+00:00 Micah micah@leap.se 2016-04-12T13:30:44+00:00 15b83d88dcedab496a19cef57f11c5c8e091dd4a In order for postfix to access the opendkim milter socket, we need to remove the chroot option for the cleanup service. See e97a9d3800b173375a630e18e4b1aa0894eb96e1 for opendkim implementation. Change-Id: I2742650965e61273fb804ebe9ce3f9bd38796582 
In order for postfix to access the opendkim milter socket, we need to
remove the chroot option for the cleanup service.

See e97a9d3800b173375a630e18e4b1aa0894eb96e1 for opendkim
implementation.

Change-Id: I2742650965e61273fb804ebe9ce3f9bd38796582
testing: adds mx delivery tests 2016-04-05T16:52:01+00:00 elijah elijah@riseup.net 2016-03-29T20:27:01+00:00 eac3056c237d523f4786593922fe8f88eb65dff7 






Set MUA required ciphers, tighten up the mandatory protocols (#4232)
2016-03-11T20:55:20+00:00

Micah
micah@leap.se

2016-03-06T14:23:34+00:00

f69f7ca97791945d0bbe61eda84e69a8ed460e04

Change-Id: I328aa37b393817e1764ea7e635fcefc801adbbf4





Change-Id: I328aa37b393817e1764ea7e635fcefc801adbbf4







Update opendkim platform pieces to match leap-cli.
2016-02-24T02:12:51+00:00

Micah
micah@leap.se

2016-02-23T19:15:17+00:00

cff07b7b3642c0d53e02cb0885f24250037b8d15

Change-Id: I9c8f9c9c3ee7cd89f013cbb08397377522ed5a4a





Change-Id: I9c8f9c9c3ee7cd89f013cbb08397377522ed5a4a







add postscreen greeter (Resolves: 2303)
2016-02-11T23:45:46+00:00

kwadronaut
kwadronaut@leap.se

2016-02-11T23:45:46+00:00

8009b9ed312837d7e13889fdb440eeeb2b1018c8

Conflicts:
	puppet/modules/site_postfix/manifests/mx.pp





Conflicts:
	puppet/modules/site_postfix/manifests/mx.pp







Due to the smtps transport specifying a header_check, the received_anon
2016-02-11T15:35:39+00:00

Micah
micah@leap.se

2016-02-09T21:32:46+00:00

cee2702b9c66e7e303494822993f46986685d87a

replacement wasn't being done. (#7890)

This moves that replacement into its own class, clears the old value and
sets it properly in the smtps transport.

Change-Id: I27c02730597df4943761d8bcb61014aeded9dc75





replacement wasn't being done. (#7890)

This moves that replacement into its own class, clears the old value and
sets it properly in the smtps transport.

Change-Id: I27c02730597df4943761d8bcb61014aeded9dc75







add postscreen greeter (Resolves: 2303)
2016-02-10T10:45:05+00:00

kwadronaut
kwadronaut@leap.se

2016-01-27T11:22:53+00:00

bd8b87f076db5e800de39e570a6b42976be40435












fix postfix Received anonymizing header regexp to properly match Client
2016-02-04T15:28:29+00:00

Micah
micah@leap.se

2016-02-02T20:50:13+00:00

461c682cccef760248d6c24d93c6ae47dd14fd22

CN entries (#7867)

Change-Id: Ie33277a62e90f9dc0602bb963dbb96a61cebed1d





CN entries (#7867)

Change-Id: Ie33277a62e90f9dc0602bb963dbb96a61cebed1d







[bug] Add smtpd_relay_restrictions to postfix conf
2016-02-02T22:34:48+00:00

varac
varacanero@zeromail.org

2016-02-02T13:41:17+00:00

49c8a0c2a5ff413430b4bf7cc90f39f28c936b3e

smtpd_relay_restrictions was added in postfix 2.10 (jessie
has 2.11 atm). Without this, outbound mails are rejected to
be relayed.

from http://www.postfix.org/SMTPD_ACCESS_README.html:

    NOTE: Postfix versions before 2.10 did not have
    smtpd_relay_restrictions. They combined the mail relay and spam blocking
    policies, under smtpd_recipient_restrictions. This could lead to
    unexpected results. For example, a permissive spam blocking policy could
    unexpectedly result in a permissive mail relay policy. An example of
    this is documented under "Dangerous use of
    smtpd_recipient_restrictions".

smtpd_relay_restrictions defaults to
'permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination'
and is configured here to check for a valid client cert.

see http://www.postfix.org/postconf.5.html#smtpd_relay_restrictions

- Resolves: #7856





smtpd_relay_restrictions was added in postfix 2.10 (jessie
has 2.11 atm). Without this, outbound mails are rejected to
be relayed.

from http://www.postfix.org/SMTPD_ACCESS_README.html:

    NOTE: Postfix versions before 2.10 did not have
    smtpd_relay_restrictions. They combined the mail relay and spam blocking
    policies, under smtpd_recipient_restrictions. This could lead to
    unexpected results. For example, a permissive spam blocking policy could
    unexpectedly result in a permissive mail relay policy. An example of
    this is documented under "Dangerous use of
    smtpd_recipient_restrictions".

smtpd_relay_restrictions defaults to
'permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination'
and is configured here to check for a valid client cert.

see http://www.postfix.org/postconf.5.html#smtpd_relay_restrictions

- Resolves: #7856