summaryrefslogtreecommitdiffstats
path: root/pykolab
diff options
context:
space:
mode:
authorJeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>2016-09-09 11:40:34 +0200
committerJeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>2016-09-09 11:41:44 +0200
commit9d70f9d837c50e0b74b69d7e8b69c93294dd767a (patch)
treec1a0c72f0d745e8a2d1a26c792e7ad1cc8ffa521 /pykolab
parent0c45010096cdf89d9bc8f570234e923a59c2a42f (diff)
downloadpykolab-9d70f9d837c50e0b74b69d7e8b69c93294dd767a.tar.gz
The defaults need to be more strict
Diffstat (limited to 'pykolab')
-rw-r--r--pykolab/setup/setup_mta.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/pykolab/setup/setup_mta.py b/pykolab/setup/setup_mta.py
index d7f070c..87039e5 100644
--- a/pykolab/setup/setup_mta.py
+++ b/pykolab/setup/setup_mta.py
@@ -261,9 +261,9 @@ result_format = "shared+%%s"
"smtp_tls_security_level": "may",
"smtpd_sasl_auth_enable": "yes",
"smtpd_sender_login_maps": "$local_recipient_maps",
- "smtpd_sender_restrictions": "permit_mynetworks, reject_sender_login_mismatch",
+ "smtpd_data_restrictions": "permit_mynetworks, check_policy_service unix:private/recipient_policy_incoming",
"smtpd_recipient_restrictions": "permit_mynetworks, reject_unauth_pipelining, reject_rbl_client zen.spamhaus.org, reject_non_fqdn_recipient, reject_invalid_helo_hostname, reject_unknown_recipient_domain, reject_unauth_destination, check_policy_service unix:private/recipient_policy_incoming, permit",
- "smtpd_sender_restrictions": "permit_mynetworks, check_policy_service unix:private/sender_policy_incoming",
+ "smtpd_sender_restrictions": "permit_mynetworks, reject_sender_login_mismatch, check_policy_service unix:private/sender_policy_incoming",
"submission_recipient_restrictions": "check_policy_service unix:private/submission_policy, permit_sasl_authenticated, reject",
"submission_sender_restrictions": "reject_non_fqdn_sender, check_policy_service unix:private/submission_policy, permit_sasl_authenticated, reject",
"submission_data_restrictions": "check_policy_service unix:private/submission_policy",