[sysadmin-notify] [ansible] Even improve helo restrictions

commit 60ee56109ba9764c0d1f0475a0cbc03d82c1a7ce Author: Nicolas Chauvet <kwizart(a)gmail.com&gt; Date: Thu Aug 24 17:13:15 2017 +0200 Even improve helo restrictions .../main.cf/main.cf.hv01.online.rpmfusion.net | 8 +++++++- 1 files changed, 7 insertions(+), 1 deletions(-) --- diff --git a/roles/base/files/postfix/main.cf/main.cf.hv01.online.rpmfusion.net b/roles/base/files/postfix/main.cf/main.cf.hv01.online.rpmfusion.net index 27582a4..a4bc364 100644 --- a/roles/base/files/postfix/main.cf/main.cf.hv01.online.rpmfusion.net +++ b/roles/base/files/postfix/main.cf/main.cf.hv01.online.rpmfusion.net @@ -709,7 +709,13 @@ virtual_alias_maps = # SMTP restrictions (block bogus stuff) -smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_delay_reject = yes +smtpd_helo_required = yes +smtpd_helo_restrictions = + permit_mynetworks, + reject_non_fqdn_helo_hostname, + reject_invalid_helo_hostname, + permit smtpd_sender_restrictions = permit_mynetworks,