Update to Postfix 3.7 and local sockets for milters

This commit is contained in:
Jason Rothstein 2023-05-14 20:56:06 -05:00
parent d462b3b699
commit 14db4fad95
12 changed files with 188 additions and 138 deletions

View File

@ -31,7 +31,7 @@
# #
# Alternatively, the table can be provided as a regu- # Alternatively, the table can be provided as a regu-
# lar-expression map where patterns are given as regular # lar-expression map where patterns are given as regular
# expressions, or lookups can be directed to TCP-based # expressions, or lookups can be directed to a TCP-based
# server. In those cases, the lookups are done in a slightly # server. In those cases, the lookups are done in a slightly
# different way as described below under "REGULAR EXPRESSION # different way as described below under "REGULAR EXPRESSION
# TABLES" or "TCP-BASED TABLES". # TABLES" or "TCP-BASED TABLES".
@ -232,7 +232,7 @@
# #
# DEFER_IF_PERMIT optional text... # DEFER_IF_PERMIT optional text...
# Defer the request if some later restriction would # Defer the request if some later restriction would
# result in a an explicit or implicit PERMIT action. # result in an explicit or implicit PERMIT action.
# Reply with "$access_map_defer_code 4.7.1 optional # Reply with "$access_map_defer_code 4.7.1 optional
# text..." when the optional text is specified, oth- # text..." when the optional text is specified, oth-
# erwise reply with a generic error response message. # erwise reply with a generic error response message.

View File

@ -29,7 +29,7 @@
# #
# Alternatively, the table can be provided as a regu- # Alternatively, the table can be provided as a regu-
# lar-expression map where patterns are given as regular # lar-expression map where patterns are given as regular
# expressions, or lookups can be directed to TCP-based # expressions, or lookups can be directed to a TCP-based
# server. In those cases, the lookups are done in a slightly # server. In those cases, the lookups are done in a slightly
# different way as described below under "REGULAR EXPRESSION # different way as described below under "REGULAR EXPRESSION
# TABLES" or "TCP-BASED TABLES". # TABLES" or "TCP-BASED TABLES".
@ -252,8 +252,8 @@
# #
# masquerade_exceptions (empty) # masquerade_exceptions (empty)
# Optional list of user names that are not subjected # Optional list of user names that are not subjected
# to address masquerading, even when their address # to address masquerading, even when their addresses
# matches $masquerade_domains. # match $masquerade_domains.
# #
# mydestination ($myhostname, localhost.$mydomain, local- # mydestination ($myhostname, localhost.$mydomain, local-
# host) # host)

View File

@ -42,8 +42,8 @@
# #
# Alternatively, the table can be provided as a regu- # Alternatively, the table can be provided as a regu-
# lar-expression map where patterns are given as regular # lar-expression map where patterns are given as regular
# expressions, or lookups can be directed to TCP-based # expressions, or lookups can be directed to a TCP-based
# server. In those case, the lookups are done in a slightly # server. In those cases, the lookups are done in a slightly
# different way as described below under "REGULAR EXPRESSION # different way as described below under "REGULAR EXPRESSION
# TABLES" or "TCP-BASED TABLES". # TABLES" or "TCP-BASED TABLES".
# #
@ -140,8 +140,8 @@
# This section describes how the table lookups change when # This section describes how the table lookups change when
# lookups are directed to a TCP-based server. For a descrip- # lookups are directed to a TCP-based server. For a descrip-
# tion of the TCP client/server lookup protocol, see tcp_ta- # tion of the TCP client/server lookup protocol, see tcp_ta-
# ble(5). This feature is not available up to and including # ble(5). This feature is available in Postfix 2.5 and
# Postfix version 2.4. # later.
# #
# Each lookup operation uses the entire address once. Thus, # Each lookup operation uses the entire address once. Thus,
# user@domain mail addresses are not broken up into their # user@domain mail addresses are not broken up into their
@ -180,40 +180,42 @@
# The text below provides only a parameter summary. See # The text below provides only a parameter summary. See
# postconf(5) for more details including examples. # postconf(5) for more details including examples.
# #
# smtp_generic_maps # smtp_generic_maps (empty)
# Address mapping lookup table for envelope and # Optional lookup tables that perform address rewrit-
# header sender and recipient addresses while deliv- # ing in the Postfix SMTP client, typically to trans-
# ering mail via SMTP. # form a locally valid address into a globally valid
# address when sending mail across the Internet.
# #
# propagate_unmatched_extensions # propagate_unmatched_extensions (canonical, virtual)
# A list of address rewriting or forwarding mecha- # What address lookup tables copy an address exten-
# nisms that propagate an address extension from the # sion from the lookup key to the lookup result.
# original address to the result. Specify zero or
# more of canonical, virtual, alias, forward,
# include, or generic.
# #
# Other parameters of interest: # Other parameters of interest:
# #
# inet_interfaces # inet_interfaces (all)
# The network interface addresses that this system # The network interface addresses that this mail sys-
# receives mail on. You need to stop and start Post- # tem receives mail on.
# fix when this parameter changes.
# #
# proxy_interfaces # proxy_interfaces (empty)
# Other interfaces that this machine receives mail on # The network interface addresses that this mail sys-
# by way of a proxy agent or network address transla- # tem receives mail on by way of a proxy or network
# tor. # address translation unit.
# #
# mydestination # mydestination ($myhostname, localhost.$mydomain, local-
# List of domains that this mail system considers # host)
# local. # The list of domains that are delivered via the
# $local_transport mail delivery transport.
# #
# myorigin # myorigin ($myhostname)
# The domain that is appended to locally-posted mail. # The domain name that locally-posted mail appears to
# come from, and that locally posted mail is deliv-
# ered to.
# #
# owner_request_special # owner_request_special (yes)
# Give special treatment to owner-xxx and xxx-request # Enable special treatment for owner-listname entries
# addresses. # in the aliases(5) file, and don't split owner-list-
# name and listname-request address localparts when
# the recipient_delimiter is set to "-".
# #
# SEE ALSO # SEE ALSO
# postmap(1), Postfix lookup table manager # postmap(1), Postfix lookup table manager

View File

@ -2,6 +2,10 @@
# of all parameters. For the syntax, and for a complete parameter # of all parameters. For the syntax, and for a complete parameter
# list, see the postconf(5) manual page (command: "man 5 postconf"). # list, see the postconf(5) manual page (command: "man 5 postconf").
# #
# TIP: use the command "postconf -n" to view main.cf parameter
# settings, "postconf parametername" to view a specific parameter,
# and "postconf 'parametername=value'" to set a specific parameter.
#
# For common configuration examples, see BASIC_CONFIGURATION_README # For common configuration examples, see BASIC_CONFIGURATION_README
# and STANDARD_CONFIGURATION_README. To find these documents, use # and STANDARD_CONFIGURATION_README. To find these documents, use
# the command "postconf html_directory readme_directory", or go to # the command "postconf html_directory readme_directory", or go to
@ -27,7 +31,7 @@
# #
# The level below is what should be used with new (not upgrade) installs. # The level below is what should be used with new (not upgrade) installs.
# #
compatibility_level = 3.6 compatibility_level = 3.7
# SOFT BOUNCE # SOFT BOUNCE
# #
@ -251,10 +255,13 @@ unknown_local_recipient_reject_code = 550
# You can specify the list of "trusted" network addresses by hand # You can specify the list of "trusted" network addresses by hand
# or you can let Postfix do it for you (which is the default). # or you can let Postfix do it for you (which is the default).
# #
# By default (mynetworks_style = subnet), Postfix "trusts" SMTP # By default (mynetworks_style = host), Postfix "trusts" only
# clients in the same IP subnetworks as the local machine. # the local machine.
#
# Specify "mynetworks_style = subnet" when Postfix should "trust"
# SMTP clients in the same IP subnetworks as the local machine.
# On Linux, this works correctly only with interfaces specified # On Linux, this works correctly only with interfaces specified
# with the "ifconfig" command. # with the "ifconfig" or "ip" command.
# #
# Specify "mynetworks_style = class" when Postfix should "trust" SMTP # Specify "mynetworks_style = class" when Postfix should "trust" SMTP
# clients in the same IP class A/B/C networks as the local machine. # clients in the same IP class A/B/C networks as the local machine.
@ -285,14 +292,16 @@ unknown_local_recipient_reject_code = 550
#mynetworks = hash:/etc/postfix/network_table #mynetworks = hash:/etc/postfix/network_table
# The relay_domains parameter restricts what destinations this system will # The relay_domains parameter restricts what destinations this system will
# relay mail to. See the smtpd_recipient_restrictions description in # relay mail to. See the smtpd_relay_restrictions and
# postconf(5) for detailed information. # smtpd_recipient_restrictions descriptions in postconf(5) for detailed
# information.
# #
# By default, Postfix relays mail # By default, Postfix relays mail
# - from "trusted" clients (IP address matches $mynetworks) to any destination, # - from "trusted" clients (IP address matches $mynetworks, or is
# SASL authenticated) to any destination,
# - from "untrusted" clients to destinations that match $relay_domains or # - from "untrusted" clients to destinations that match $relay_domains or
# subdomains thereof, except addresses with sender-specified routing. # subdomains thereof, except addresses with sender-specified routing.
# The default relay_domains value is $mydestination. # The default relay_domains value is empty.
# #
# In addition to the above, the Postfix SMTP server by default accepts mail # In addition to the above, the Postfix SMTP server by default accepts mail
# that Postfix is final destination for: # that Postfix is final destination for:
@ -312,7 +321,7 @@ unknown_local_recipient_reject_code = 550
# list this system as their primary or backup MX host. See the # list this system as their primary or backup MX host. See the
# permit_mx_backup restriction description in postconf(5). # permit_mx_backup restriction description in postconf(5).
# #
#relay_domains = $mydestination #relay_domains =
# INTERNET OR INTRANET # INTERNET OR INTRANET
@ -744,9 +753,9 @@ shlib_directory = /usr/lib64/postfix
{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} {% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %}
# The Milter List # The Milter List
{% for milter in ensure_postfix.milter_list %} {% for milter in ensure_postfix.milter_list %}
# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} # -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.destination }}
{% endfor %} {% endfor %}
smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.destination }} {% endfor %}
{% endif %} {% endif %}
{% if postfix_domains is defined and postfix_domains is iterable %} {% if postfix_domains is defined and postfix_domains is iterable %}
@ -763,4 +772,3 @@ message_size_limit = {{ postfix_message_size_limit }}
smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_helo_restrictions = reject_unknown_helo_hostname
smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining
smtpd_discard_ehlo_keywords = silent-discard, dsn smtpd_discard_ehlo_keywords = silent-discard, dsn

View File

@ -2,6 +2,10 @@
# of all parameters. For the syntax, and for a complete parameter # of all parameters. For the syntax, and for a complete parameter
# list, see the postconf(5) manual page (command: "man 5 postconf"). # list, see the postconf(5) manual page (command: "man 5 postconf").
# #
# TIP: use the command "postconf -n" to view main.cf parameter
# settings, "postconf parametername" to view a specific parameter,
# and "postconf 'parametername=value'" to set a specific parameter.
#
# For common configuration examples, see BASIC_CONFIGURATION_README # For common configuration examples, see BASIC_CONFIGURATION_README
# and STANDARD_CONFIGURATION_README. To find these documents, use # and STANDARD_CONFIGURATION_README. To find these documents, use
# the command "postconf html_directory readme_directory", or go to # the command "postconf html_directory readme_directory", or go to
@ -27,7 +31,7 @@
# #
# The level below is what should be used with new (not upgrade) installs. # The level below is what should be used with new (not upgrade) installs.
# #
compatibility_level = 3.6 compatibility_level = 3.7
# SOFT BOUNCE # SOFT BOUNCE
# #
@ -251,10 +255,13 @@ unknown_local_recipient_reject_code = 550
# You can specify the list of "trusted" network addresses by hand # You can specify the list of "trusted" network addresses by hand
# or you can let Postfix do it for you (which is the default). # or you can let Postfix do it for you (which is the default).
# #
# By default (mynetworks_style = subnet), Postfix "trusts" SMTP # By default (mynetworks_style = host), Postfix "trusts" only
# clients in the same IP subnetworks as the local machine. # the local machine.
#
# Specify "mynetworks_style = subnet" when Postfix should "trust"
# SMTP clients in the same IP subnetworks as the local machine.
# On Linux, this works correctly only with interfaces specified # On Linux, this works correctly only with interfaces specified
# with the "ifconfig" command. # with the "ifconfig" or "ip" command.
# #
# Specify "mynetworks_style = class" when Postfix should "trust" SMTP # Specify "mynetworks_style = class" when Postfix should "trust" SMTP
# clients in the same IP class A/B/C networks as the local machine. # clients in the same IP class A/B/C networks as the local machine.
@ -285,14 +292,16 @@ unknown_local_recipient_reject_code = 550
#mynetworks = hash:/etc/postfix/network_table #mynetworks = hash:/etc/postfix/network_table
# The relay_domains parameter restricts what destinations this system will # The relay_domains parameter restricts what destinations this system will
# relay mail to. See the smtpd_recipient_restrictions description in # relay mail to. See the smtpd_relay_restrictions and
# postconf(5) for detailed information. # smtpd_recipient_restrictions descriptions in postconf(5) for detailed
# information.
# #
# By default, Postfix relays mail # By default, Postfix relays mail
# - from "trusted" clients (IP address matches $mynetworks) to any destination, # - from "trusted" clients (IP address matches $mynetworks, or is
# SASL authenticated) to any destination,
# - from "untrusted" clients to destinations that match $relay_domains or # - from "untrusted" clients to destinations that match $relay_domains or
# subdomains thereof, except addresses with sender-specified routing. # subdomains thereof, except addresses with sender-specified routing.
# The default relay_domains value is $mydestination. # The default relay_domains value is empty.
# #
# In addition to the above, the Postfix SMTP server by default accepts mail # In addition to the above, the Postfix SMTP server by default accepts mail
# that Postfix is final destination for: # that Postfix is final destination for:
@ -312,7 +321,7 @@ unknown_local_recipient_reject_code = 550
# list this system as their primary or backup MX host. See the # list this system as their primary or backup MX host. See the
# permit_mx_backup restriction description in postconf(5). # permit_mx_backup restriction description in postconf(5).
# #
#relay_domains = $mydestination #relay_domains =
# INTERNET OR INTRANET # INTERNET OR INTRANET

View File

@ -22,24 +22,32 @@ smtp inet n - n - - smtpd
# -o smtpd_sasl_auth_enable=yes # -o smtpd_sasl_auth_enable=yes
# -o smtpd_tls_auth_only=yes # -o smtpd_tls_auth_only=yes
# -o smtpd_reject_unlisted_recipient=no # -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions # Instead of specifying complex smtpd_<xxx>_restrictions here,
# -o smtpd_helo_restrictions=$mua_helo_restrictions # specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
# -o smtpd_sender_restrictions=$mua_sender_restrictions # here, and specify mua_<xxx>_restrictions in main.cf (where
# -o smtpd_recipient_restrictions= # "<xxx>" is "client", "helo", "sender", "relay", or "recipient").
# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject # -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_relay_restrictions=
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING # -o milter_macro_daemon_name=ORIGINATING
# Choose one: enable smtps for loopback clients only, or for any client. # Choose one: enable submissions for loopback clients only, or for any client.
#127.0.0.1:smtps inet n - n - - smtpd #127.0.0.1:submissions inet n - n - - smtpd
# smtps inet n - n - - smtpd #submissions inet n - n - - smtpd
# -o syslog_name=postfix/smtps # -o syslog_name=postfix/submissions
# -o smtpd_tls_wrappermode=yes # -o smtpd_tls_wrappermode=yes
# -o smtpd_sasl_auth_enable=yes # -o smtpd_sasl_auth_enable=yes
# -o smtpd_reject_unlisted_recipient=no # -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions # Instead of specifying complex smtpd_<xxx>_restrictions here,
# -o smtpd_helo_restrictions=$mua_helo_restrictions # specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
# -o smtpd_sender_restrictions=$mua_sender_restrictions # here, and specify mua_<xxx>_restrictions in main.cf (where
# -o smtpd_recipient_restrictions= # "<xxx>" is "client", "helo", "sender", "relay", or "recipient").
# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject # -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_relay_restrictions=
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING # -o milter_macro_daemon_name=ORIGINATING
#628 inet n - n - - qmqpd #628 inet n - n - - qmqpd
pickup unix n - n 60 1 pickup pickup unix n - n 60 1 pickup

View File

@ -22,24 +22,32 @@ smtp inet n - n - - smtpd
# -o smtpd_sasl_auth_enable=yes # -o smtpd_sasl_auth_enable=yes
# -o smtpd_tls_auth_only=yes # -o smtpd_tls_auth_only=yes
# -o smtpd_reject_unlisted_recipient=no # -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions # Instead of specifying complex smtpd_<xxx>_restrictions here,
# -o smtpd_helo_restrictions=$mua_helo_restrictions # specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
# -o smtpd_sender_restrictions=$mua_sender_restrictions # here, and specify mua_<xxx>_restrictions in main.cf (where
# -o smtpd_recipient_restrictions= # "<xxx>" is "client", "helo", "sender", "relay", or "recipient").
# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject # -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_relay_restrictions=
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING # -o milter_macro_daemon_name=ORIGINATING
# Choose one: enable smtps for loopback clients only, or for any client. # Choose one: enable submissions for loopback clients only, or for any client.
#127.0.0.1:smtps inet n - n - - smtpd #127.0.0.1:submissions inet n - n - - smtpd
#smtps inet n - n - - smtpd #submissions inet n - n - - smtpd
# -o syslog_name=postfix/smtps # -o syslog_name=postfix/submissions
# -o smtpd_tls_wrappermode=yes # -o smtpd_tls_wrappermode=yes
# -o smtpd_sasl_auth_enable=yes # -o smtpd_sasl_auth_enable=yes
# -o smtpd_reject_unlisted_recipient=no # -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions # Instead of specifying complex smtpd_<xxx>_restrictions here,
# -o smtpd_helo_restrictions=$mua_helo_restrictions # specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
# -o smtpd_sender_restrictions=$mua_sender_restrictions # here, and specify mua_<xxx>_restrictions in main.cf (where
# -o smtpd_recipient_restrictions= # "<xxx>" is "client", "helo", "sender", "relay", or "recipient").
# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject # -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_relay_restrictions=
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING # -o milter_macro_daemon_name=ORIGINATING
#628 inet n - n - - qmqpd #628 inet n - n - - qmqpd
pickup unix n - n 60 1 pickup pickup unix n - n 60 1 pickup

View File

@ -123,7 +123,7 @@ $command_directory/postconf:f:root:-:755
$command_directory/postfix:f:root:-:755 $command_directory/postfix:f:root:-:755
$command_directory/postkick:f:root:-:755 $command_directory/postkick:f:root:-:755
$command_directory/postlock:f:root:-:755 $command_directory/postlock:f:root:-:755
$command_directory/postlog:f:root:-:755 $command_directory/postlog:f:root:$setgid_group:2755:u
$command_directory/postmap:f:root:-:755 $command_directory/postmap:f:root:-:755
$command_directory/postmulti:f:root:-:755 $command_directory/postmulti:f:root:-:755
$command_directory/postsuper:f:root:-:755 $command_directory/postsuper:f:root:-:755
@ -157,8 +157,8 @@ $manpage_directory/man1/postalias.1.gz:f:root:-:644
$manpage_directory/man1/postcat.1.gz:f:root:-:644 $manpage_directory/man1/postcat.1.gz:f:root:-:644
$manpage_directory/man1/postconf.1.gz:f:root:-:644 $manpage_directory/man1/postconf.1.gz:f:root:-:644
$manpage_directory/man1/postdrop.1.gz:f:root:-:644 $manpage_directory/man1/postdrop.1.gz:f:root:-:644
$manpage_directory/man1/postfix.1.gz:f:root:-:644
$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 $manpage_directory/man1/postfix-tls.1.gz:f:root:-:644
$manpage_directory/man1/postfix.1.gz:f:root:-:644
$manpage_directory/man1/postkick.1.gz:f:root:-:644 $manpage_directory/man1/postkick.1.gz:f:root:-:644
$manpage_directory/man1/postlock.1.gz:f:root:-:644 $manpage_directory/man1/postlock.1.gz:f:root:-:644
$manpage_directory/man1/postlog.1.gz:f:root:-:644 $manpage_directory/man1/postlog.1.gz:f:root:-:644
@ -256,6 +256,7 @@ $readme_directory/ADDRESS_REWRITING_README:f:root:-:644
$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 $readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644
$readme_directory/BACKSCATTER_README:f:root:-:644 $readme_directory/BACKSCATTER_README:f:root:-:644
$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 $readme_directory/BASIC_CONFIGURATION_README:f:root:-:644
$readme_directory/BDAT_README:f:root:-:644
$readme_directory/BUILTIN_FILTER_README:f:root:-:644 $readme_directory/BUILTIN_FILTER_README:f:root:-:644
$readme_directory/COMPATIBILITY_README:f:root:-:644 $readme_directory/COMPATIBILITY_README:f:root:-:644
$readme_directory/CONNECTION_CACHE_README:f:root:-:644 $readme_directory/CONNECTION_CACHE_README:f:root:-:644
@ -274,12 +275,15 @@ $readme_directory/LINUX_README:f:root:-:644
$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 $readme_directory/LOCAL_RECIPIENT_README:f:root:-:644
$readme_directory/MACOSX_README:f:root:-:644:o $readme_directory/MACOSX_README:f:root:-:644:o
$readme_directory/MAILDROP_README:f:root:-:644 $readme_directory/MAILDROP_README:f:root:-:644
$readme_directory/MAILLOG_README:f:root:-:644
$readme_directory/MEMCACHE_README:f:root:-:644 $readme_directory/MEMCACHE_README:f:root:-:644
$readme_directory/MILTER_README:f:root:-:644 $readme_directory/MILTER_README:f:root:-:644
$readme_directory/MULTI_INSTANCE_README:f:root:-:644 $readme_directory/MULTI_INSTANCE_README:f:root:-:644
$readme_directory/SMTPUTF8_README:f:root:-:644
$readme_directory/NFS_README:f:root:-:644 $readme_directory/NFS_README:f:root:-:644
$readme_directory/OVERVIEW:f:root:-:644 $readme_directory/OVERVIEW:f:root:-:644
$readme_directory/PACKAGE_README:f:root:-:644 $readme_directory/PACKAGE_README:f:root:-:644
$readme_directory/POSTSCREEN_3_5_README:f:root:-:644
$readme_directory/POSTSCREEN_README:f:root:-:644 $readme_directory/POSTSCREEN_README:f:root:-:644
$readme_directory/QMQP_README:f:root:-:644:o $readme_directory/QMQP_README:f:root:-:644:o
$readme_directory/QSHAPE_README:f:root:-:644 $readme_directory/QSHAPE_README:f:root:-:644
@ -307,6 +311,7 @@ $html_directory/ADDRESS_REWRITING_README.html:f:root:-:644
$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 $html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644
$html_directory/BACKSCATTER_README.html:f:root:-:644 $html_directory/BACKSCATTER_README.html:f:root:-:644
$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 $html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644
$html_directory/BDAT_README.html:f:root:-:644
$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 $html_directory/BUILTIN_FILTER_README.html:f:root:-:644
$html_directory/CDB_README.html:f:root:-:644 $html_directory/CDB_README.html:f:root:-:644
$html_directory/COMPATIBILITY_README.html:f:root:-:644 $html_directory/COMPATIBILITY_README.html:f:root:-:644
@ -327,15 +332,19 @@ $html_directory/LINUX_README.html:f:root:-:644
$html_directory/LMDB_README.html:f:root:-:644 $html_directory/LMDB_README.html:f:root:-:644
$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 $html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644
$html_directory/MAILDROP_README.html:f:root:-:644 $html_directory/MAILDROP_README.html:f:root:-:644
$html_directory/MAILLOG_README.html:f:root:-:644
$html_directory/MEMCACHE_README.html:f:root:-:644
$html_directory/MILTER_README.html:f:root:-:644 $html_directory/MILTER_README.html:f:root:-:644
$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 $html_directory/MULTI_INSTANCE_README.html:f:root:-:644
$html_directory/MYSQL_README.html:f:root:-:644 $html_directory/MYSQL_README.html:f:root:-:644
$html_directory/SMTPUTF8_README.html:f:root:-:644
$html_directory/SQLITE_README.html:f:root:-:644 $html_directory/SQLITE_README.html:f:root:-:644
$html_directory/NFS_README.html:f:root:-:644 $html_directory/NFS_README.html:f:root:-:644
$html_directory/OVERVIEW.html:f:root:-:644 $html_directory/OVERVIEW.html:f:root:-:644
$html_directory/PACKAGE_README.html:f:root:-:644 $html_directory/PACKAGE_README.html:f:root:-:644
$html_directory/PCRE_README.html:f:root:-:644 $html_directory/PCRE_README.html:f:root:-:644
$html_directory/PGSQL_README.html:f:root:-:644 $html_directory/PGSQL_README.html:f:root:-:644
$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644
$html_directory/POSTSCREEN_README.html:f:root:-:644 $html_directory/POSTSCREEN_README.html:f:root:-:644
$html_directory/QMQP_README.html:f:root:-:644:o $html_directory/QMQP_README.html:f:root:-:644:o
$html_directory/QSHAPE_README.html:f:root:-:644 $html_directory/QSHAPE_README.html:f:root:-:644
@ -360,6 +369,7 @@ $html_directory/XFORWARD_README.html:f:root:-:644
$html_directory/access.5.html:f:root:-:644 $html_directory/access.5.html:f:root:-:644
$html_directory/aliases.5.html:f:root:-:644 $html_directory/aliases.5.html:f:root:-:644
$html_directory/anvil.8.html:f:root:-:644 $html_directory/anvil.8.html:f:root:-:644
$html_directory/bounce.5.html:f:root:-:644
$html_directory/bounce.8.html:f:root:-:644 $html_directory/bounce.8.html:f:root:-:644
$html_directory/canonical.5.html:f:root:-:644 $html_directory/canonical.5.html:f:root:-:644
$html_directory/cidr_table.5.html:f:root:-:644 $html_directory/cidr_table.5.html:f:root:-:644
@ -374,6 +384,7 @@ $html_directory/generic.5.html:f:root:-:644
$html_directory/header_checks.5.html:f:root:-:644 $html_directory/header_checks.5.html:f:root:-:644
$html_directory/index.html:f:root:-:644 $html_directory/index.html:f:root:-:644
$html_directory/ldap_table.5.html:f:root:-:644 $html_directory/ldap_table.5.html:f:root:-:644
$html_directory/lmdb_table.5.html:f:root:-:644
$html_directory/lmtp.8.html:f:root:-:644 $html_directory/lmtp.8.html:f:root:-:644
$html_directory/local.8.html:f:root:-:644 $html_directory/local.8.html:f:root:-:644
$html_directory/mailq.1.html:f:root:-:644 $html_directory/mailq.1.html:f:root:-:644
@ -396,6 +407,7 @@ $html_directory/postconf.5.html:f:root:-:644
$html_directory/postdrop.1.html:f:root:-:644 $html_directory/postdrop.1.html:f:root:-:644
$html_directory/postfix-logo.jpg:f:root:-:644 $html_directory/postfix-logo.jpg:f:root:-:644
$html_directory/postfix-manuals.html:f:root:-:644 $html_directory/postfix-manuals.html:f:root:-:644
$html_directory/postfix-tls.1.html:f:root:-:644
$html_directory/postfix-wrapper.5.html:f:root:-:644 $html_directory/postfix-wrapper.5.html:f:root:-:644
$html_directory/postfix.1.html:f:root:-:644 $html_directory/postfix.1.html:f:root:-:644
$html_directory/postkick.1.html:f:root:-:644 $html_directory/postkick.1.html:f:root:-:644
@ -415,13 +427,16 @@ $html_directory/qmqp-source.1.html:f:root:-:644
$html_directory/qmqpd.8.html:f:root:-:644 $html_directory/qmqpd.8.html:f:root:-:644
$html_directory/regexp_table.5.html:f:root:-:644 $html_directory/regexp_table.5.html:f:root:-:644
$html_directory/relocated.5.html:f:root:-:644 $html_directory/relocated.5.html:f:root:-:644
$html_directory/scache.8.html:f:root:-:644
$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 $html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644
$html_directory/showq.8.html:f:root:-:644 $html_directory/showq.8.html:f:root:-:644
$html_directory/smtp-sink.1.html:f:root:-:644 $html_directory/smtp-sink.1.html:f:root:-:644
$html_directory/smtp-source.1.html:f:root:-:644 $html_directory/smtp-source.1.html:f:root:-:644
$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 $html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644
$html_directory/smtpd.8.html:f:root:-:644 $html_directory/smtpd.8.html:f:root:-:644
$html_directory/socketmap_table.5.html:f:root:-:644
$html_directory/spawn.8.html:f:root:-:644 $html_directory/spawn.8.html:f:root:-:644
$html_directory/tlsmgr.8.html:f:root:-:644
$html_directory/tlsproxy.8.html:f:root:-:644 $html_directory/tlsproxy.8.html:f:root:-:644
$html_directory/tcp_table.5.html:f:root:-:644 $html_directory/tcp_table.5.html:f:root:-:644
$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 $html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644

View File

@ -24,7 +24,7 @@
# #
# Alternatively, the table can be provided as a regu- # Alternatively, the table can be provided as a regu-
# lar-expression map where patterns are given as regular # lar-expression map where patterns are given as regular
# expressions, or lookups can be directed to TCP-based # expressions, or lookups can be directed to a TCP-based
# server. In those case, the lookups are done in a slightly # server. In those case, the lookups are done in a slightly
# different way as described below under "REGULAR EXPRESSION # different way as described below under "REGULAR EXPRESSION
# TABLES" or "TCP-BASED TABLES". # TABLES" or "TCP-BASED TABLES".
@ -86,8 +86,7 @@
# description of regular expression lookup table syntax, see # description of regular expression lookup table syntax, see
# regexp_table(5) or pcre_table(5). For a description of the # regexp_table(5) or pcre_table(5). For a description of the
# TCP client/server table lookup protocol, see tcp_table(5). # TCP client/server table lookup protocol, see tcp_table(5).
# This feature is not available up to and including Postfix # This feature is available in Postfix 2.5 and later.
# version 2.4.
# #
# Each pattern is a regular expression that is applied to # Each pattern is a regular expression that is applied to
# the entire address being looked up. Thus, user@domain mail # the entire address being looked up. Thus, user@domain mail
@ -107,8 +106,8 @@
# This section describes how the table lookups change when # This section describes how the table lookups change when
# lookups are directed to a TCP-based server. For a descrip- # lookups are directed to a TCP-based server. For a descrip-
# tion of the TCP client/server lookup protocol, see tcp_ta- # tion of the TCP client/server lookup protocol, see tcp_ta-
# ble(5). This feature is not available up to and including # ble(5). This feature is available in Postfix 2.5 and
# Postfix version 2.4. # later.
# #
# Each lookup operation uses the entire address once. Thus, # Each lookup operation uses the entire address once. Thus,
# user@domain mail addresses are not broken up into their # user@domain mail addresses are not broken up into their
@ -125,27 +124,30 @@
# The text below provides only a parameter summary. See # The text below provides only a parameter summary. See
# postconf(5) for more details including examples. # postconf(5) for more details including examples.
# #
# relocated_maps # relocated_maps (empty)
# List of lookup tables for relocated users or sites. # Optional lookup tables with new contact information
# for users or domains that no longer exist.
# #
# Other parameters of interest: # Other parameters of interest:
# #
# inet_interfaces # inet_interfaces (all)
# The network interface addresses that this system # The network interface addresses that this mail sys-
# receives mail on. You need to stop and start Post- # tem receives mail on.
# fix when this parameter changes.
# #
# mydestination # mydestination ($myhostname, localhost.$mydomain, local-
# List of domains that this mail system considers # host)
# local. # The list of domains that are delivered via the
# $local_transport mail delivery transport.
# #
# myorigin # myorigin ($myhostname)
# The domain that is appended to locally-posted mail. # The domain name that locally-posted mail appears to
# come from, and that locally posted mail is deliv-
# ered to.
# #
# proxy_interfaces # proxy_interfaces (empty)
# Other interfaces that this machine receives mail on # The network interface addresses that this mail sys-
# by way of a proxy agent or network address transla- # tem receives mail on by way of a proxy or network
# tor. # address translation unit.
# #
# SEE ALSO # SEE ALSO
# trivial-rewrite(8), address resolver # trivial-rewrite(8), address resolver

View File

@ -61,7 +61,7 @@
# #
# Alternatively, the table can be provided as a regu- # Alternatively, the table can be provided as a regu-
# lar-expression map where patterns are given as regular # lar-expression map where patterns are given as regular
# expressions, or lookups can be directed to TCP-based # expressions, or lookups can be directed to a TCP-based
# server. In those case, the lookups are done in a slightly # server. In those case, the lookups are done in a slightly
# different way as described below under "REGULAR EXPRESSION # different way as described below under "REGULAR EXPRESSION
# TABLES" or "TCP-BASED TABLES". # TABLES" or "TCP-BASED TABLES".

View File

@ -51,7 +51,7 @@
# #
# Alternatively, the table can be provided as a regu- # Alternatively, the table can be provided as a regu-
# lar-expression map where patterns are given as regular # lar-expression map where patterns are given as regular
# expressions, or lookups can be directed to TCP-based # expressions, or lookups can be directed to a TCP-based
# server. In those case, the lookups are done in a slightly # server. In those case, the lookups are done in a slightly
# different way as described below under "REGULAR EXPRESSION # different way as described below under "REGULAR EXPRESSION
# TABLES" or "TCP-BASED TABLES". # TABLES" or "TCP-BASED TABLES".
@ -99,8 +99,8 @@
# tination, or when it is listed in $inet_interfaces # tination, or when it is listed in $inet_interfaces
# or $proxy_interfaces. # or $proxy_interfaces.
# #
# This functionality overlaps with functionality of # This functionality overlaps with the functionality
# the local aliases(5) database. The difference is # of the local aliases(5) database. The difference is
# that virtual(5) mapping can be applied to non-local # that virtual(5) mapping can be applied to non-local
# addresses. # addresses.
# #
@ -155,7 +155,7 @@
# #
# The propagate_unmatched_extensions parameter controls # The propagate_unmatched_extensions parameter controls
# whether an unmatched address extension (+foo) is propa- # whether an unmatched address extension (+foo) is propa-
# gated to the result of table lookup. # gated to the result of a table lookup.
# #
# VIRTUAL ALIAS DOMAINS # VIRTUAL ALIAS DOMAINS
# Besides virtual aliases, the virtual alias table can also # Besides virtual aliases, the virtual alias table can also
@ -232,8 +232,8 @@
# This section describes how the table lookups change when # This section describes how the table lookups change when
# lookups are directed to a TCP-based server. For a descrip- # lookups are directed to a TCP-based server. For a descrip-
# tion of the TCP client/server lookup protocol, see tcp_ta- # tion of the TCP client/server lookup protocol, see tcp_ta-
# ble(5). This feature is not available up to and including # ble(5). This feature is available in Postfix 2.5 and
# Postfix version 2.4. # later.
# #
# Each lookup operation uses the entire address once. Thus, # Each lookup operation uses the entire address once. Thus,
# user@domain mail addresses are not broken up into their # user@domain mail addresses are not broken up into their
@ -254,11 +254,11 @@
# virtual_alias_maps ($virtual_maps) # virtual_alias_maps ($virtual_maps)
# Optional lookup tables that alias specific mail # Optional lookup tables that alias specific mail
# addresses or domains to other local or remote # addresses or domains to other local or remote
# address. # addresses.
# #
# virtual_alias_domains ($virtual_alias_maps) # virtual_alias_domains ($virtual_alias_maps)
# Postfix is final destination for the specified list # Postfix is the final destination for the specified
# of virtual alias domains, that is, domains for # list of virtual alias domains, that is, domains for
# which all addresses are aliased to addresses in # which all addresses are aliased to addresses in
# other local or remote domains. # other local or remote domains.
# #

View File

@ -2,13 +2,11 @@
# vars file for ensure_postfix # vars file for ensure_postfix
milter_list: milter_list:
- description: 'OpenDKIM' - description: 'OpenDKIM'
hostname: 'localhost' destination: '/run/opendkim/opendkim.sock'
port: '8891' protocol: 'local'
protocol: 'inet'
- description: 'OpenDMARC' - description: 'OpenDMARC'
hostname: 'localhost' hostname: '/run/opendmarc/opendmarc.sock'
port: '8893' protocol: 'local'
protocol: 'inet'
package_list: package_list:
- name: 'opendkim' - name: 'opendkim'
state: 'present' state: 'present'