Age | Commit message (Collapse) | Author |
|
over 25 because that is typically blocked, and we cannot force TLS on that port due to other MTAs not being configured for this century. We don't use submission (568) because that uses STARTTLS, and the STARTTLS banner can easily be stripped by an adversary. (#3604)
. enable smtps (port 465) for client submission over TLS, and require that TLS is enabled
. add 465 to the allowed open ports in the firewall
. change the smtp-service.json to use 465 instead of 25
note: I did not use the 'use_smtps' parameter that is available in the postfix
class because it added some options that we do not want/need.
Change-Id: I0040eb2dff6008a1c830d59df9963eb83dc9ea02
|
|
This reverts commit 8c038fea91adc87adf9e408c16e2f0ec9838e3d2.
|
|
|
|
node, if it is not, it will fail to compile
this requires a newer leap_cli, so I've bumped the compatibility requirement
Change-Id: Ie1061798d058087126163793b216dd5938eb95a6
|
|
work-around, use the couchdb admin/passwd
Change-Id: Ibb1cd8416d00552f8ca1716e42a08137a4b461aa
|
|
|
|
|
|
|
|
default to empty list.
|
|
|
|
|
|
|
|
|
|
by default.
|
|
Change-Id: I19e91887c3f8e90764b4baef8c5e29e25658e190
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
generating zone file).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(#2016)
|
|
|
|
included in the web app (#1978)
remove site_ca_daemon module and configuration in site.pp as well as the provider_base/services/ca.json
|
|
setup ednp_server and ednp_client stunnels
update couchdb puppet submodule to support configurable ednp_port parameter and general module cleanup
pass ednp_port to couchdb setup so that it is configured in the vm.args template
clarify in comments the difference between the epmd and ednp ports
remove hard-coded erlang_vm_port variable and instead setup shorewall to allow for the stunnel connection only
setup dnat rules for the ednp client connections
|
|
|
|
shorter named epmd (erlang port mapper daemon)
|
|
an email address contact.
|
|
|
|
|