lub
/
mailu
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity
3,455 Commits
3 Branches
0 Tags
7.4 MiB
Commit Graph

84 Commits (5ef383f57206413a4db42d741539fddf8c389cab)

Author SHA1 Message Date
Florent Daigniere 7166e7d2b2 Implement : slow transports
Dimitri Huisman 53975684b8 Using Syslog is the new standard. It is not optional anymore.
Dimitri Huisman d5896fb2c6 Add log rotation (if logging to file). Make rsyslog the default.
Dimitri Huisman 567b5ef172
Merge branch 'master' into postfix-logging
Till Skrodzki c48e00ee26 Do not call .split() on RELAYNETS if not specified
Florent Daigniere 8dad40f67c doh
Florent Daigniere 9d474f32a6 RELAYNETS is comma separated!
Florent Daigniere 502affbe66 Use the regexp engine since we have one
Florent Daigniere a349190e52 simplify
Florent Daigniere 995ce8d437 Remove OUTCLEAN_ADDRESS 
I believe that this isn't relevant anymore as we don't use OpenDKIM
anymore

Background on:
https://bofhskull.wordpress.com/2014/03/25/postfix-opendkim-and-missing-from-header/
Alexander Graf b02ceab72f handle DEFER_ON_TLS_ERROR as bool 
use /conf/mta-sts-daemon.yml when override is missing
Florent Daigniere 489520f067 forgot about alpine/lmdb
Florent Daigniere a1da4daa4c Implement the DANE-only lookup policyd 
https://github.com/Snawoot/postfix-mta-sts-resolver/issues/67 for
context
Florent Daigniere 67db72d774 Behave like documented
Florent Daigniere a8142dabbe Introduce DEFER_ON_TLS_ERROR 
This will default to True and defer emails that fail even "loose"
validation of DANE or MTA-STS

It should work most of the time but if it doesn't and you would rather
see your emails delivered, you can turn it off.
Florent Daigniere 4f96e99144 MTA-STS (use rather than publish policies)
Florent Daigniere 65a27b1c7f add additional options to make DANE easier
Florent Daigniere fb8d52ceb2 Merge branch 'master' of https://github.com/Mailu/Mailu into tls_policy_map
bors[bot] b57df78dac
Merge 
1916: Ratelimit outgoing emails per user r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

A conflict-free version of  implementing per-user sender limits

### Related issue(s)
- close  
- close 
- close  

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Florent Daigniere b066a5e2ac add a default tls_policy_map
Florent Daigniere 1df79f8132 give PFS a chance
Florent Daigniere 925105075c this is required in fact
Florent Daigniere 772e5efb7d Disable pipelining to prevent bypass
Florent Daigniere 2b05e72ce4 Revert "maybe fix the tests" 
This reverts commit f971b47fb9.
Florent Daigniere f971b47fb9 maybe fix the tests
Florent Daigniere 4a871c0905 this causes trouble with the test
Florent Daigniere 55cdb1a534 be explicit about what we support
Florent Daigniere ecadf46ac6 fix PFS
Florent Daigniere de3620da4a Don't send credentials in clear ever
Florent Daigniere 4535c42e70 This isn't required
Florent Daigniere 1101e401e8 Apply the restriction on the right port
Florent Daigniere d6ce5d0c06 Remove a warning: limits don't apply to trusted hosts
Florent Daigniere bcdc137677 Alpine has removed support for btree and hash
Florent Daigniere 1438253a06 Ratelimit outgoing emails per user
Florent Daigniere 8bc1d6c08b Replace PUBLIC_HOSTNAME/IP in Received headers 
This will ensure that we don't get spam points for not respecting the
RFC
Florent Daigniere 513d2a4c5e Fix bug : nested headers shouldn't be touched
Michael Wyraz ca6ea6465c make syslog optional
Michael Wyraz e979743226 Rsyslog logging for postfix, optional logging to file, no logging of test requests
Thomas Rehn 05ab244638 Ensure that the rendered file ends with newline in order to make `postconf` work correctly
Michael Wyraz e4454d776a Allow to enforce TLS for outbound using OUTBOUND_TLS_LEVEL=encrypt (default is 'may')
SunMar ac6b8d62dd Remove `reject_unverified_recipient` from `smtpd_client_restrictions` 
Fix for , though I'm not sure if this is the right way to fix the issue. It was added in 175349a224.
kaiyou bd69b7a491 Add support for SRS, related to
Michael Wyraz a907fe4cac Split HOST_ANTISPAM in HOST_ANTISPAM_MILTER and HOST_ANTISPAM_WEBUI
Ionut Filip 075417bf90 Merged master and fixed conflicts
Dario Ernst ce0c24e076 Merge branch 'master' into HorayNarea-feat-upgrade-alpine
Daniel Huber ae290482c0
Format relay credentials file with jinja
Daniel Huber 515e95076a
Merge branch 'master' into feat-relay-auth
Dario Ernst d155b2c533 Start postfix directly with stdout logging
Daniel Huber 7dcb2eb006
Add authentication for email relays
Florian Peschka b9fd29a52f
Add extra newline to main.cf 
This should prevent jinja from stripping the newline, which causes overrides to be appended after the comment section

see