summaryrefslogtreecommitdiff
path: root/puppet/modules/site_postfix/manifests
diff options
context:
space:
mode:
authorMicah Anderson <micah@leap.se>2013-10-03 17:57:48 -0400
committerMicah Anderson <micah@leap.se>2013-10-06 17:31:16 -0400
commited694ff4b412c36801e17c93c0ee587da1ebc981 (patch)
tree22b1013f82610c208a6bb8d876fb3ca8824b4b25 /puppet/modules/site_postfix/manifests
parent9acb4a7c2a36f12a5ca71e5c4c74364d344e2c5f (diff)
implement stripping user's home IPs from Received headers (#3866)
Change-Id: I6d78286f84144bba5fd3166cc0264570e4fd3ee0
Diffstat (limited to 'puppet/modules/site_postfix/manifests')
-rw-r--r--puppet/modules/site_postfix/manifests/checks.pp20
1 files changed, 19 insertions, 1 deletions
diff --git a/puppet/modules/site_postfix/manifests/checks.pp b/puppet/modules/site_postfix/manifests/checks.pp
index 06f9a7a4..31399d32 100644
--- a/puppet/modules/site_postfix/manifests/checks.pp
+++ b/puppet/modules/site_postfix/manifests/checks.pp
@@ -6,7 +6,7 @@ class site_postfix::checks {
mode => '0755',
owner => root,
group => postfix,
- require => Class['postfix'];
+ require => Package['postfix'];
'/etc/postfix/checks/helo_checks':
content => template('site_postfix/checks/helo_access.erb'),
@@ -20,4 +20,22 @@ class site_postfix::checks {
refreshonly => true,
subscribe => File['/etc/postfix/checks/helo_checks'];
}
+
+ # Anonymize the user's home IP from the email headers (Feature #3866)
+ package { 'postfix-pcre': ensure => installed }
+
+ file { '/etc/postfix/checks/received_anon':
+ source => 'puppet:///modules/site_postfix/checks/received_anon',
+ mode => '0644',
+ owner => root,
+ group => root,
+ notify => Service['postfix']
+ }
+
+ postfix::config {
+ 'header_checks':
+ value => 'pcre:/etc/postfix/checks/received_anon',
+ require => File['/etc/postfix/checks/received_anon'];
+ }
+
}