Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-08-29 | Make TLS-required smtps (465) be port for sending SMTP. This is preferred ↵ | Micah Anderson | |
over 25 because that is typically blocked, and we cannot force TLS on that port due to other MTAs not being configured for this century. We don't use submission (568) because that uses STARTTLS, and the STARTTLS banner can easily be stripped by an adversary. (#3604) . enable smtps (port 465) for client submission over TLS, and require that TLS is enabled . add 465 to the allowed open ports in the firewall . change the smtp-service.json to use 465 instead of 25 note: I did not use the 'use_smtps' parameter that is available in the postfix class because it added some options that we do not want/need. Change-Id: I0040eb2dff6008a1c830d59df9963eb83dc9ea02 | |||
2013-08-29 | fix smtpd mail restrictions (Feature #3166) | varac | |
2013-08-29 | Deploy postfix with an empty main.cf as beginning (Feature #3584) | varac | |
2013-08-28 | SMTP checks (Feature #2304) | varac | |
2013-08-28 | integrate manual postfix config changes in puppet (Feature #3538) | varac | |
2013-08-28 | added site_postfix::debug for debugging (#3538) | varac | |
2013-07-31 | use smtpd_tls_security_level = may in postfix config (Bug #3348) | varac | |
2013-07-26 | Merge branch 'varac/feature/mx' into feature/leap_mx | Micah Anderson | |
Conflicts: provider_base/services/mx.json puppet/manifests/site.pp puppet/modules/site_mx/manifests/init.pp puppet/modules/site_postfix/manifests/mx.pp Change-Id: Ib2952f6cb972c40a998f20d7bbdb23bb35bef419 | |||
2013-07-25 | beginning of smtp_auth config with client certs | varac | |
2013-07-25 | smtpd_recipient_restrictions: +permit_tls_all_clientcerts | varac | |
2013-07-25 | smtpd_checks: smtpd_data_restrictions | varac | |
2013-07-25 | using alias resolver | varac | |
2013-07-25 | update postfix module to new shared version for parameterized classes, and other | Micah Anderson | |
2.7 updates update site_postfix::mx to use parameterized classes | |||
2013-07-25 | Configure Postfix for incoming mails (Feature #2269) | varac | |
2013-07-25 | smtpd_checks: smtpd_delay_reject | varac | |
2013-07-25 | smtpd_checks: smtpd_data_restrictions | varac | |
2013-07-25 | using alias resolver | varac | |
2013-07-25 | update postfix module to new shared version for parameterized classes, and other | Micah Anderson | |
2.7 updates update site_postfix::mx to use parameterized classes | |||
2013-07-25 | Configure Postfix for incoming mails (Feature #2269) | varac | |
2013-07-25 | hiera variable mx.contact -> postfix $root_mail_recipient | varac | |
2013-07-25 | added basic site_postfix::mx config | varac | |
2013-07-15 | fix smtpd_recipient_restrictions, debug connections from localhost | varac | |
2013-07-10 | added tls support, including smtp auth via client cert | varac | |
2013-07-09 | beginning of smtp_auth config with client certs | varac | |
2013-07-09 | smtpd_recipient_restrictions: +permit_tls_all_clientcerts | varac | |
2013-07-09 | smtpd_checks: smtpd_delay_reject | varac | |
2013-07-09 | smtpd_checks: smtpd_data_restrictions | varac | |
2013-07-09 | using alias resolver | varac | |
2013-07-09 | update postfix module to new shared version for parameterized classes, and other | Micah Anderson | |
2.7 updates update site_postfix::mx to use parameterized classes | |||
2013-07-09 | Configure Postfix for incoming mails (Feature #2269) | varac | |
2013-07-09 | hiera variable mx.contact -> postfix $root_mail_recipient | varac | |
2013-07-09 | added basic site_postfix::mx config | varac | |