From cfdbad27fe0b1c5e98b127f2c3d22258e233ef11 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@leap.se>
Date: Tue, 3 Sep 2013 10:37:21 -0400
Subject: add /etc/postfix/checks directory and setup a check_helo_access that
 allows admins to have some control over problem clients connecting that
 present helo patterns that they wish to block (#3694)

Change-Id: I159c29b6fe17e3d75b607d1a6fa82856b976c9b4
---
 puppet/modules/site_postfix/manifests/checks.pp | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 puppet/modules/site_postfix/manifests/checks.pp

(limited to 'puppet/modules/site_postfix/manifests/checks.pp')

diff --git a/puppet/modules/site_postfix/manifests/checks.pp b/puppet/modules/site_postfix/manifests/checks.pp
new file mode 100644
index 00000000..06f9a7a4
--- /dev/null
+++ b/puppet/modules/site_postfix/manifests/checks.pp
@@ -0,0 +1,23 @@
+class site_postfix::checks {
+
+  file {
+    '/etc/postfix/checks':
+      ensure  => directory,
+      mode    => '0755',
+      owner   => root,
+      group   => postfix,
+      require => Class['postfix'];
+
+    '/etc/postfix/checks/helo_checks':
+      content => template('site_postfix/checks/helo_access.erb'),
+      mode    => '0644',
+      owner   => root,
+      group   => root;
+  }
+
+  exec {
+    '/usr/sbin/postmap /etc/postfix/checks/helo_checks':
+      refreshonly => true,
+      subscribe   => File['/etc/postfix/checks/helo_checks'];
+  }
+}
-- 
cgit v1.2.3