From 8d69a43fe97079f9595ed460bfa36c4bfd6cb0a8 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@leap.se>
Date: Tue, 3 Sep 2013 10:22:40 -0400
Subject: Without smtpd_helo_required, the helo restrictions are easily
 bypassed by not sending a HELO (#3693)

Change-Id: I6a7338136a53e16962a070826493139fa3307df7
---
 puppet/modules/site_postfix/manifests/mx/smtpd_checks.pp | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'puppet/modules/site_postfix/manifests')

diff --git a/puppet/modules/site_postfix/manifests/mx/smtpd_checks.pp b/puppet/modules/site_postfix/manifests/mx/smtpd_checks.pp
index 7ade8588..34cffb0d 100644
--- a/puppet/modules/site_postfix/manifests/mx/smtpd_checks.pp
+++ b/puppet/modules/site_postfix/manifests/mx/smtpd_checks.pp
@@ -1,6 +1,8 @@
 class site_postfix::mx::smtpd_checks {
 
   postfix::config {
+    'smtpd_helo_required':
+      value => 'yes';
     'smtpd_client_restrictions':
       value => 'permit_mynetworks,permit';
     'smtpd_data_restrictions':
-- 
cgit v1.2.3