crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ajout d'une limite de messages par minute à postfix

Browse source 
darcs-hash:20080826202655-ffbb2-d24778614661289911322952f98975719c107f70.gz
This commit is contained in:
Nicolas Dandrimont 2008-08-26 22:26:55 +02:00
parent 51f749dcae
commit 4b4bffc272
1 changed files with 16 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

18
Python/etc/postfix/main.cf
View file

@ -35,6 +35,11 @@ def add(*values):
import commands import commands
exports = [s.split(' ', 2)[0] for s in commands.getoutput("/usr/sbin/postconf -d").split("\n")] exports = [s.split(' ', 2)[0] for s in commands.getoutput("/usr/sbin/postconf -d").split("\n")]
# Les différents réseaux
local_networks = ["127.0.0.0/8"]
adm_networks = ["10.231.136.0/24"]
client_networks = ["138.231.136.0/21", "138.231.144.0/21", "138.231.148.0/22"]
@# +------------------+ @# +------------------+
@# | Variables utiles | @# | Variables utiles |
@# +------------------+ @# +------------------+
@ -47,9 +52,9 @@ mydomain = "crans.org"
myorigin = "crans.org" myorigin = "crans.org"
@# Reseaux locaux @# Reseaux locaux
mynetworks = ["127.0.0.0/8"] mynetworks = local_networks
if mx: if mx:
add(["138.231.136.0/21", "138.231.144.0/21", "138.231.148.0/22", "10.231.136.0/24"]) add(client_networks + adm_networks)
if not mx: if not mx:
@# Ecoute en local uniquement @# Ecoute en local uniquement
@ -188,6 +193,15 @@ if main:
@# Filtrage sur les sources de connexions @# Filtrage sur les sources de connexions
smtpd_client_restrictions = "reject_rbl_client rbl-plus.mail-abuse.org" smtpd_client_restrictions = "reject_rbl_client rbl-plus.mail-abuse.org"
@## Limitation des messages envoyés par minute
@# On n'ignore que les messages venant d'adresses "protégées"
smtpd_client_event_limit_exceptions = local_networks
if mx:
add(adm_networks)
@# On limite à 10 messages par minute
smtpd_client_message_rate_limit = 10
@## Filtrage au MAIL FROM @## Filtrage au MAIL FROM
@# Rejet si le domaine de l'envoyeur n'est pas dans un DNS @# Rejet si le domaine de l'envoyeur n'est pas dans un DNS
smtpd_sender_restrictions = "reject_unknown_sender_domain" smtpd_sender_restrictions = "reject_unknown_sender_domain"