lub
/
mailu
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity
4,105 Commits
3 Branches
0 Tags
7.4 MiB
Commit Graph

75 Commits (d20c217ae68213aa0d5236e3189d758322f77c05)

Author SHA1 Message Date
Alexander Graf 842be9b7c3
Skip listen to v6 when SUBNET6 is not set
Alexander Graf 10562233ca
Add SUBNET6 to places where SUBNET is used
Alexander Graf 3b08b113bf
Fix ipv6 subnet for xclient_hosts
Florent Daigniere ee6975b109 doh
Florent Daigniere b263db72df Restrict XHOST to where useful
Florent Daigniere 7a2d06401a Tweak postfix logging
Florent Daigniere 55c1e55529 Same for front-smtp 
This should enable postfix to have visibility on TLS usage and fix the
following:
Florent Daigniere 4e3874b0c1 Enable dynamic resolution of hostnames
Florent Daigniere 3e51d15b03 Remove the strict anti-spoofing rule.
Vincent Kling bab3f0f5a4 Remove POD_ADDRESS_RANGE
Florent Daigniere 7166e7d2b2 Implement : slow transports
Dimitri Huisman 53975684b8 Using Syslog is the new standard. It is not optional anymore.
Dimitri Huisman 567b5ef172
Merge branch 'master' into postfix-logging
Till Skrodzki c48e00ee26 Do not call .split() on RELAYNETS if not specified
Florent Daigniere 8dad40f67c doh
Florent Daigniere 9d474f32a6 RELAYNETS is comma separated!
Alexander Graf b02ceab72f handle DEFER_ON_TLS_ERROR as bool 
use /conf/mta-sts-daemon.yml when override is missing
Florent Daigniere 489520f067 forgot about alpine/lmdb
Florent Daigniere a1da4daa4c Implement the DANE-only lookup policyd 
https://github.com/Snawoot/postfix-mta-sts-resolver/issues/67 for
context
Florent Daigniere 67db72d774 Behave like documented
Florent Daigniere a8142dabbe Introduce DEFER_ON_TLS_ERROR 
This will default to True and defer emails that fail even "loose"
validation of DANE or MTA-STS

It should work most of the time but if it doesn't and you would rather
see your emails delivered, you can turn it off.
Florent Daigniere 4f96e99144 MTA-STS (use rather than publish policies)
Florent Daigniere 65a27b1c7f add additional options to make DANE easier
Florent Daigniere fb8d52ceb2 Merge branch 'master' of https://github.com/Mailu/Mailu into tls_policy_map
bors[bot] b57df78dac
Merge 
1916: Ratelimit outgoing emails per user r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

A conflict-free version of  implementing per-user sender limits

### Related issue(s)
- close  
- close 
- close  

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Florent Daigniere b066a5e2ac add a default tls_policy_map
Florent Daigniere 1df79f8132 give PFS a chance
Florent Daigniere 925105075c this is required in fact
Florent Daigniere 2b05e72ce4 Revert "maybe fix the tests" 
This reverts commit f971b47fb9.
Florent Daigniere f971b47fb9 maybe fix the tests
Florent Daigniere 4a871c0905 this causes trouble with the test
Florent Daigniere 55cdb1a534 be explicit about what we support
Florent Daigniere ecadf46ac6 fix PFS
Florent Daigniere de3620da4a Don't send credentials in clear ever
Florent Daigniere 4535c42e70 This isn't required
Florent Daigniere 1101e401e8 Apply the restriction on the right port
Florent Daigniere d6ce5d0c06 Remove a warning: limits don't apply to trusted hosts
Florent Daigniere bcdc137677 Alpine has removed support for btree and hash
Florent Daigniere 1438253a06 Ratelimit outgoing emails per user
Michael Wyraz ca6ea6465c make syslog optional
Michael Wyraz e979743226 Rsyslog logging for postfix, optional logging to file, no logging of test requests
Thomas Rehn 05ab244638 Ensure that the rendered file ends with newline in order to make `postconf` work correctly
Michael Wyraz e4454d776a Allow to enforce TLS for outbound using OUTBOUND_TLS_LEVEL=encrypt (default is 'may')
SunMar ac6b8d62dd Remove `reject_unverified_recipient` from `smtpd_client_restrictions` 
Fix for , though I'm not sure if this is the right way to fix the issue. It was added in 175349a224.
kaiyou bd69b7a491 Add support for SRS, related to
Michael Wyraz a907fe4cac Split HOST_ANTISPAM in HOST_ANTISPAM_MILTER and HOST_ANTISPAM_WEBUI
Ionut Filip 075417bf90 Merged master and fixed conflicts
Dario Ernst ce0c24e076 Merge branch 'master' into HorayNarea-feat-upgrade-alpine
Daniel Huber 515e95076a
Merge branch 'master' into feat-relay-auth
Dario Ernst d155b2c533 Start postfix directly with stdout logging