From 0bc15aeb281e0ac31cf8579a9e4479b13508cdc3 Mon Sep 17 00:00:00 2001
From: Jonas Smedegaard <dr@jones.dk>
Date: Wed, 15 Oct 2014 10:25:02 +0200
Subject: Tighten submission options, based on
 <http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL>.

---
 postfix/postfix.sh | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'postfix')

diff --git a/postfix/postfix.sh b/postfix/postfix.sh
index 5501c46..2cb7d6d 100755
--- a/postfix/postfix.sh
+++ b/postfix/postfix.sh
@@ -434,7 +434,10 @@ submission inet	n	-	n	-	-	smtpd
 	-o syslog_name=postfix/submission
 	-o smtpd_tls_security_level=encrypt
 	-o smtpd_sasl_auth_enable=yes
+	-o smtpd_sasl_local_domain=$mydomain
 	-o smtpd_client_restrictions=permit_sasl_authenticated,reject
+	-o smtpd_sender_restrictions=reject_sender_login_mismatch
+	-o smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject
 EOF
 		addoroverwritewithindents $tempdir/master.cf '^pickup\h' << EOF
 pickup	fifo	n	-	-	60	1	pickup
-- 
cgit v1.2.3