summaryrefslogtreecommitdiff
path: root/puppet/modules/site_postfix
AgeCommit message (Expand)Author
2015-11-02Add initial rate-limiting for outgoing SMTP, using postfwd (#5972)Micah
2015-11-02Add basic DKIM support, this requires changes in leap_cli detailed inMicah
2015-10-13add clamav filtering, with sanesecurity signature updating and provider white...Micah
2015-09-24allow certain aliases, like 'abuse', to be publicly forwardable.elijah
2015-09-15Merge branch 'feature/rewrite_openpgp_header_7413' into developMicah Anderson
2015-09-15minor lintingMicah Anderson
2015-09-14Merge remote-tracking branch 'micah/hiera_defaults_7443' into developvarac
2015-09-11switch aliases to use virtual_alias_mapselijah
2015-09-10Make sure hiera values have valid defaults if they are not specified (#7443)Micah Anderson
2015-09-10Fix clients being blocked by RBLs (#7431)Micah Anderson
2015-09-08rewrite openpgp header to be always correct (#7413)Micah Anderson
2015-08-21add support for configurable mail alias mapselijah
2015-07-28Support RBL blocking of incoming mail (#5923)Micah Anderson
2015-04-28Reject inbound mail to local system users that don't appear invarac
2014-12-09Deploy leap ca cert for smtp tls config (Bug #6485)varac
2014-12-02minor lintingMicah Anderson
2014-04-02Force satellite hosts that only speak to relayhost to have aMicah Anderson
2014-04-02Fix for satellite hosts that are unable to contact their relayhostMicah Anderson
2014-04-01Include all the ips that are allowed to send mail through the relay inMicah Anderson
2014-03-24fixes #5360 adds admin@ as reserved address + lintingkwadronaut
2013-12-19Set mynetworks to include any mx server in the provider to allow them to0.5.0rc1Micah Anderson
2013-12-19Fix the location of the smtp/smtpd_tls_session_cache_database (#4813)Micah Anderson
2013-12-18add a smtp_tls class and include that on both mx servers and satellitesMicah Anderson
2013-12-18rename the tls.pp to be smtpd_tls.pp, this allows us to have a separateMicah Anderson
2013-11-27disable starttls over submission for client connections, we are using TLS wra...Micah Anderson
2013-10-31certtool-postfix-gendh attempted before postfix is installed (Bug #4340)Micah Anderson
2013-10-31require postfix is installed before installing postfix-pcre (#4223)Micah Anderson
2013-10-11class moved but forgot to renamevarac
2013-10-11move site_config::checks to site_config::mx::checksvarac
2013-10-11deploy postfix satellites on all nodes (Bug #1683)varac
2013-10-10contacts is now a top-level hiera variablevarac
2013-10-10fix site_postfix::mx::reserved_aliases class name and package arrayvarac
2013-10-09setup email account 'blacklist' by configuring reserved aliases, effectively ...Micah Anderson
2013-10-06It turns out postfix's variable for 1024bit DH parameters can actually take a...0.3.0rc3Micah Anderson
2013-10-06implement stripping user's home IPs from Received headers (#3866)Micah Anderson
2013-10-06only use TLSv1 or later for smtp (Feature #4011)Micah Anderson
2013-10-03Merge branch 'feature/3953' into developMicah Anderson
2013-10-03It turns out postfix's variable for 1024bit DH parameters can actually take a...Micah Anderson
2013-10-02setup smtpd_tls_eecdh_grade to 'ultra' and configure the smtpd_tls_dh1024_par...Micah Anderson
2013-09-26set myhostname in postfix the internet hostname of this mail system. The defa...Micah Anderson
2013-09-26Merge branch 'bug/3868' into developMicah Anderson
2013-09-26Add client-side TLS configuration (#3868)Micah Anderson
2013-09-26Merge branch 'bug/3868' into developMicah Anderson
2013-09-26properly set the $smtps_recipient_restrictions variable in master.cf (#3935)Micah Anderson
2013-09-25add smtp_tls_received_header to include information about the protocol and ci...Micah Anderson
2013-09-24fix client_ca cert+key for mx service (Feature #3921)varac
2013-09-24seperate cert and key deployment (#3918)varac
2013-09-19only deploy x509 stuff for nodes if it existes in hiera (Feature #3875)varac
2013-09-18use x509 for postfix ca and fix names for cert+key (Feature #3833)varac
2013-09-03use check_helo_access hash:/helo_checks also for $submission_helo_restrictionsvarac