forked from Deuxfleurs/nixcfg
update smtp server security conf
This commit is contained in:
parent
2472a6b61a
commit
ac42e95f1a
3 changed files with 9 additions and 5 deletions
|
@ -26,9 +26,9 @@ services:
|
|||
build:
|
||||
context: ./postfix
|
||||
args:
|
||||
# https://packages.debian.org/fr/buster/postfix
|
||||
VERSION: 3.4.14-0+deb10u1
|
||||
image: superboum/amd64_postfix:v3
|
||||
# https://packages.debian.org/fr/trixie/postfix
|
||||
VERSION: 3.8.4-1
|
||||
image: superboum/amd64_postfix:v4
|
||||
|
||||
opendkim:
|
||||
build:
|
||||
|
|
|
@ -1,4 +1,4 @@
|
|||
FROM amd64/debian:buster
|
||||
FROM amd64/debian:trixie
|
||||
|
||||
ARG VERSION
|
||||
|
||||
|
|
|
@ -77,7 +77,11 @@ smtpd_relay_restrictions =
|
|||
permit_mynetworks
|
||||
reject_unauth_destination
|
||||
|
||||
smtpd_data_restrictions = reject_unauth_pipelining
|
||||
# Disable SMTP smuggling attacks
|
||||
# https://www.postfix.org/smtp-smuggling.html
|
||||
smtpd_forbid_unauth_pipelining = yes
|
||||
smtpd_discard_ehlo_keywords = chunking
|
||||
smtpd_forbid_bare_newline = yes
|
||||
|
||||
smtpd_client_connection_rate_limit = 2
|
||||
|
||||
|
|
Loading…
Reference in a new issue