[Postfix] Mise en place de la base de donnée de white/black list.

This commit is contained in:
Pierre-Elliott Bécue 2013-07-27 20:05:03 +02:00
parent befab8a77c
commit c27836f832
3 changed files with 33 additions and 31 deletions

View file

@ -8,6 +8,7 @@
</Group> </Group>
<Group name="mail-mx"> <Group name="mail-mx">
<Path name="/etc/postfix/postscreen_access.cidr"/>
<Python name="/etc/postfix/master.cf"/> <Python name="/etc/postfix/master.cf"/>
<Group name="ldap"> <Group name="ldap">

View file

@ -288,34 +288,35 @@ if not secondary:
if has("titanic"): if has("titanic"):
@relayhost=[ovh.adm.crans.org]:25 @relayhost=[ovh.adm.crans.org]:25
@# PostScreen configuration if mx:
@# Access List @# PostScreen configuration
@postscreen_access_list = cidr:/etc/postfix/postscreen_access.cidr @# Access List
@## Tu es blacklisté ? VTFF @postscreen_access_list = cidr:/etc/postfix/postscreen_access.cidr
@postscreen_blacklist_action = drop @## Tu es blacklisté ? VTFF
@ @postscreen_blacklist_action = drop
@# Bannière d'accueil multi valuée @
@postscreen_greet_banner = Bienvenue au crans, veuillez patienter quelques secondes. @# Bannière d'accueil multi valuée
@## On fait semblant d'aller à RCPT TO, puis poubelle @postscreen_greet_banner = Bienvenue au crans, veuillez patienter quelques secondes.
@postscreen_greet_action = enforce @## On fait semblant d'aller à RCPT TO, puis poubelle
@ @postscreen_greet_action = enforce
@# RBL, le retour @
@postscreen_dnsbl_sites = @# RBL, le retour
@ zen.spamhaus.org*2 @postscreen_dnsbl_sites =
@ dnsbl.inps.de*2 @ zen.spamhaus.org*2
@ dnsbl.ahbl.org @ dnsbl.inps.de*2
@ b.barracudacentral.org @ dnsbl.ahbl.org
@ @ b.barracudacentral.org
@# Score >= 3 ? Bye bye @
@postscreen_dnsbl_threshold = 3 @# Score >= 3 ? Bye bye
@postscreen_dnsbl_action = enforce @postscreen_dnsbl_threshold = 3
@ @postscreen_dnsbl_action = enforce
@# Filtre utilisé par postfix, mis en amont via postscreen @
@postscreen_non_smtp_command_enable = yes @# Filtre utilisé par postfix, mis en amont via postscreen
@postscreen_non_smtp_command_action = enforce @postscreen_non_smtp_command_enable = yes
@ @postscreen_non_smtp_command_action = enforce
@postscreen_bare_newline_enable = yes @
@postscreen_bare_newline_action = enforce @postscreen_bare_newline_enable = yes
@ @postscreen_bare_newline_action = enforce
@postscreen_pipelining_enable = yes @
@postscreen_pipelining_action = enforce @postscreen_pipelining_enable = yes
@postscreen_pipelining_action = enforce