86 Commity (f169f814368c641bcf628179f4957b681f37302f)

Autor SHA1 Wiadomość Data
Florent Daigniere 3e51d15b03 Remove the strict anti-spoofing rule. 3 lat temu
Vincent Kling bab3f0f5a4 Remove POD_ADDRESS_RANGE 3 lat temu
Florent Daigniere 7166e7d2b2 Implement #2213: slow transports 4 lat temu
Dimitri Huisman 53975684b8 Using Syslog is the new standard. It is not optional anymore. 4 lat temu
Dimitri Huisman d5896fb2c6 Add log rotation (if logging to file). Make rsyslog the default. 4 lat temu
Dimitri Huisman 567b5ef172
Merge branch 'master' into postfix-logging 4 lat temu
Till Skrodzki c48e00ee26 Do not call .split() on RELAYNETS if not specified 4 lat temu
Florent Daigniere 8dad40f67c doh 4 lat temu
Florent Daigniere 9d474f32a6 RELAYNETS is comma separated! 4 lat temu
Florent Daigniere 502affbe66 Use the regexp engine since we have one 4 lat temu
Florent Daigniere a349190e52 simplify 4 lat temu
Florent Daigniere 995ce8d437 Remove OUTCLEAN_ADDRESS
I believe that this isn't relevant anymore as we don't use OpenDKIM
anymore

Background on:
https://bofhskull.wordpress.com/2014/03/25/postfix-opendkim-and-missing-from-header/
4 lat temu
Alexander Graf b02ceab72f handle DEFER_ON_TLS_ERROR as bool
use /conf/mta-sts-daemon.yml when override is missing
4 lat temu
Florent Daigniere 489520f067 forgot about alpine/lmdb 4 lat temu
Florent Daigniere a1da4daa4c Implement the DANE-only lookup policyd
https://github.com/Snawoot/postfix-mta-sts-resolver/issues/67 for
context
4 lat temu
Florent Daigniere 67db72d774 Behave like documented 4 lat temu
Florent Daigniere a8142dabbe Introduce DEFER_ON_TLS_ERROR
This will default to True and defer emails that fail even "loose"
validation of DANE or MTA-STS

It should work most of the time but if it doesn't and you would rather
see your emails delivered, you can turn it off.
4 lat temu
Florent Daigniere 4f96e99144 MTA-STS (use rather than publish policies) 4 lat temu
Florent Daigniere 65a27b1c7f add additional options to make DANE easier 4 lat temu
Florent Daigniere fb8d52ceb2 Merge branch 'master' of https://github.com/Mailu/Mailu into tls_policy_map 4 lat temu
bors[bot] b57df78dac
Merge #1916
1916: Ratelimit outgoing emails per user r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

A conflict-free version of #1360 implementing per-user sender limits

### Related issue(s)
- close #1360 
- close #1031
- close #1774 

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
4 lat temu
Florent Daigniere b066a5e2ac add a default tls_policy_map 4 lat temu
Florent Daigniere 1df79f8132 give PFS a chance 4 lat temu
Florent Daigniere 925105075c this is required in fact 4 lat temu
Florent Daigniere 772e5efb7d Disable pipelining to prevent bypass 4 lat temu
Florent Daigniere 2b05e72ce4 Revert "maybe fix the tests"
This reverts commit f971b47fb9.
4 lat temu
Florent Daigniere f971b47fb9 maybe fix the tests 4 lat temu
Florent Daigniere 4a871c0905 this causes trouble with the test 4 lat temu
Florent Daigniere 55cdb1a534 be explicit about what we support 4 lat temu
Florent Daigniere ecadf46ac6 fix PFS 4 lat temu
Florent Daigniere de3620da4a Don't send credentials in clear ever 4 lat temu
Florent Daigniere 4535c42e70 This isn't required 4 lat temu
Florent Daigniere 1101e401e8 Apply the restriction on the right port 4 lat temu
Florent Daigniere d6ce5d0c06 Remove a warning: limits don't apply to trusted hosts 4 lat temu
Florent Daigniere bcdc137677 Alpine has removed support for btree and hash 4 lat temu
Florent Daigniere 1438253a06 Ratelimit outgoing emails per user 4 lat temu
Florent Daigniere 8bc1d6c08b Replace PUBLIC_HOSTNAME/IP in Received headers
This will ensure that we don't get spam points for not respecting the
RFC
4 lat temu
Florent Daigniere 513d2a4c5e Fix bug #1660: nested headers shouldn't be touched 5 lat temu
Michael Wyraz ca6ea6465c make syslog optional 5 lat temu
Michael Wyraz e979743226 Rsyslog logging for postfix, optional logging to file, no logging of test requests 5 lat temu
Thomas Rehn 05ab244638 Ensure that the rendered file ends with newline in order to make `postconf` work correctly 5 lat temu
Michael Wyraz e4454d776a Allow to enforce TLS for outbound using OUTBOUND_TLS_LEVEL=encrypt (default is 'may') 6 lat temu
SunMar ac6b8d62dd Remove `reject_unverified_recipient` from `smtpd_client_restrictions`
Fix for #1292, though I'm not sure if this is the right way to fix the issue. It was added in 175349a224.
6 lat temu
kaiyou bd69b7a491 Add support for SRS, related to #328 6 lat temu
Michael Wyraz a907fe4cac Split HOST_ANTISPAM in HOST_ANTISPAM_MILTER and HOST_ANTISPAM_WEBUI 6 lat temu
Ionut Filip 075417bf90 Merged master and fixed conflicts 6 lat temu
Dario Ernst ce0c24e076 Merge branch 'master' into HorayNarea-feat-upgrade-alpine 6 lat temu
Daniel Huber ae290482c0
Format relay credentials file with jinja 6 lat temu
Daniel Huber 515e95076a
Merge branch 'master' into feat-relay-auth 6 lat temu
Dario Ernst d155b2c533 Start postfix directly with stdout logging 6 lat temu