Compare commits
1 Commits
feat/impro
...
renovate/p
Author | SHA1 | Date | |
---|---|---|---|
|
e1b144d236 |
@@ -6,7 +6,7 @@ ARG APCU_PECL_VERSION=5.1.22
|
|||||||
# renovate: datasource=github-tags depName=Imagick/imagick versioning=semver-coerced
|
# renovate: datasource=github-tags depName=Imagick/imagick versioning=semver-coerced
|
||||||
ARG IMAGICK_PECL_VERSION=3.7.0
|
ARG IMAGICK_PECL_VERSION=3.7.0
|
||||||
# renovate: datasource=github-tags depName=php/pecl-mail-mailparse versioning=semver-coerced
|
# renovate: datasource=github-tags depName=php/pecl-mail-mailparse versioning=semver-coerced
|
||||||
ARG MAILPARSE_PECL_VERSION=3.1.4
|
ARG MAILPARSE_PECL_VERSION=v3.1.6
|
||||||
# renovate: datasource=github-tags depName=php-memcached-dev/php-memcached versioning=semver-coerced
|
# renovate: datasource=github-tags depName=php-memcached-dev/php-memcached versioning=semver-coerced
|
||||||
ARG MEMCACHED_PECL_VERSION=3.2.0
|
ARG MEMCACHED_PECL_VERSION=3.2.0
|
||||||
# renovate: datasource=github-tags depName=phpredis/phpredis versioning=semver-coerced
|
# renovate: datasource=github-tags depName=phpredis/phpredis versioning=semver-coerced
|
||||||
|
@@ -431,22 +431,11 @@ if [ ! -z "$DNSBL_CONFIG" ]; then
|
|||||||
echo -e "\e[32mDetected SPAMHAUS_DQS_KEY variable from mailcow.conf...\e[0m"
|
echo -e "\e[32mDetected SPAMHAUS_DQS_KEY variable from mailcow.conf...\e[0m"
|
||||||
echo -e "\e[33mUsing DQS Blocklists from Spamhaus!\e[0m"
|
echo -e "\e[33mUsing DQS Blocklists from Spamhaus!\e[0m"
|
||||||
SPAMHAUS_DNSBL_CONFIG=$(cat <<EOF
|
SPAMHAUS_DNSBL_CONFIG=$(cat <<EOF
|
||||||
${SPAMHAUS_DQS_KEY}.zen.dq.spamhaus.net=127.0.0.[2..255]
|
${SPAMHAUS_DQS_KEY}.zen.dq.spamhaus.net=127.0.0.[4..7]*6
|
||||||
|
${SPAMHAUS_DQS_KEY}.zen.dq.spamhaus.net=127.0.0.[10;11]*8
|
||||||
|
${SPAMHAUS_DQS_KEY}.zen.dq.spamhaus.net=127.0.0.3*4
|
||||||
|
${SPAMHAUS_DQS_KEY}.zen.dq.spamhaus.net=127.0.0.2*3
|
||||||
postscreen_dnsbl_reply_map = texthash:/opt/postfix/conf/dnsbl_reply.map
|
postscreen_dnsbl_reply_map = texthash:/opt/postfix/conf/dnsbl_reply.map
|
||||||
|
|
||||||
smtpd_recipient_restrictions = check_recipient_mx_access proxy:mysql:/opt/postfix/conf/sql/mysql_mbr_access_maps.cf,
|
|
||||||
permit_sasl_authenticated,
|
|
||||||
permit_mynetworks,
|
|
||||||
check_recipient_access proxy:mysql:/opt/postfix/conf/sql/mysql_tls_enforce_in_policy.cf,
|
|
||||||
reject_invalid_helo_hostname,
|
|
||||||
reject_unauth_destination,
|
|
||||||
reject_rhsbl_sender ${SPAMHAUS_DQS_KEY}.dbl.dq.spamhaus.net=127.0.1.[2..99],
|
|
||||||
reject_rhsbl_helo ${SPAMHAUS_DQS_KEY}.dbl.dq.spamhaus.net=127.0.1.[2..99],
|
|
||||||
reject_rhsbl_reverse_client ${SPAMHAUS_DQS_KEY}.dbl.dq.spamhaus.net=127.0.1.[2..99],
|
|
||||||
reject_rhsbl_sender ${SPAMHAUS_DQS_KEY}.zrd.dq.spamhaus.net=127.0.2.[2..24],
|
|
||||||
reject_rhsbl_helo ${SPAMHAUS_DQS_KEY}.zrd.dq.spamhaus.net=127.0.2.[2..24],
|
|
||||||
reject_rhsbl_reverse_client ${SPAMHAUS_DQS_KEY}.zrd.dq.spamhaus.net=127.0.2.[2..24],
|
|
||||||
reject_rbl_client ${SPAMHAUS_DQS_KEY}.zen.dq.spamhaus.net=127.0.0.[2..255]
|
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
cat <<EOF > /opt/postfix/conf/dnsbl_reply.map
|
cat <<EOF > /opt/postfix/conf/dnsbl_reply.map
|
||||||
@@ -472,20 +461,10 @@ EOF
|
|||||||
echo -e "\e[32mThe AS of your IP is NOT listed as a banned AS from Spamhaus!\e[0m"
|
echo -e "\e[32mThe AS of your IP is NOT listed as a banned AS from Spamhaus!\e[0m"
|
||||||
echo -e "\e[33mUsing the open Spamhaus blocklists.\e[0m"
|
echo -e "\e[33mUsing the open Spamhaus blocklists.\e[0m"
|
||||||
SPAMHAUS_DNSBL_CONFIG=$(cat <<EOF
|
SPAMHAUS_DNSBL_CONFIG=$(cat <<EOF
|
||||||
zen.spamhaus.org=127.0.0.[2..11]
|
zen.spamhaus.org=127.0.0.[10;11]*8
|
||||||
|
zen.spamhaus.org=127.0.0.[4..7]*6
|
||||||
smtpd_recipient_restrictions = check_recipient_mx_access proxy:mysql:/opt/postfix/conf/sql/mysql_mbr_access_maps.cf,
|
zen.spamhaus.org=127.0.0.3*4
|
||||||
permit_sasl_authenticated,
|
zen.spamhaus.org=127.0.0.2*3
|
||||||
permit_mynetworks,
|
|
||||||
check_recipient_access proxy:mysql:/opt/postfix/conf/sql/mysql_tls_enforce_in_policy.cf,
|
|
||||||
reject_invalid_helo_hostname,
|
|
||||||
reject_unauth_destination,
|
|
||||||
reject_rbl_client zen.spamhaus.org=127.0.0.[2..11],
|
|
||||||
reject_rhsbl_sender dbl.spamhaus.org=127.0.1.[2..99],
|
|
||||||
reject_rhsbl_helo dbl.spamhaus.org=127.0.1.[2..99],
|
|
||||||
reject_rhsbl_reverse_client dbl.spamhaus.org=127.0.1.[2..99],
|
|
||||||
warn_if_reject reject_rbl_client zen.spamhaus.org=127.255.255.[1..255]
|
|
||||||
|
|
||||||
EOF
|
EOF
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@@ -87,6 +87,12 @@ smtpd_error_sleep_time = 10s
|
|||||||
smtpd_hard_error_limit = ${stress?1}${stress:5}
|
smtpd_hard_error_limit = ${stress?1}${stress:5}
|
||||||
smtpd_helo_required = yes
|
smtpd_helo_required = yes
|
||||||
smtpd_proxy_timeout = 600s
|
smtpd_proxy_timeout = 600s
|
||||||
|
smtpd_recipient_restrictions = check_recipient_mx_access proxy:mysql:/opt/postfix/conf/sql/mysql_mbr_access_maps.cf,
|
||||||
|
permit_sasl_authenticated,
|
||||||
|
permit_mynetworks,
|
||||||
|
check_recipient_access proxy:mysql:/opt/postfix/conf/sql/mysql_tls_enforce_in_policy.cf,
|
||||||
|
reject_invalid_helo_hostname,
|
||||||
|
reject_unauth_destination
|
||||||
smtpd_sasl_auth_enable = yes
|
smtpd_sasl_auth_enable = yes
|
||||||
smtpd_sasl_authenticated_header = yes
|
smtpd_sasl_authenticated_header = yes
|
||||||
smtpd_sasl_path = inet:dovecot:10001
|
smtpd_sasl_path = inet:dovecot:10001
|
||||||
|
@@ -297,7 +297,7 @@ services:
|
|||||||
- dovecot
|
- dovecot
|
||||||
|
|
||||||
postfix-mailcow:
|
postfix-mailcow:
|
||||||
image: mailcow/postfix:1.72
|
image: mailcow/postfix:1.71
|
||||||
depends_on:
|
depends_on:
|
||||||
- mysql-mailcow
|
- mysql-mailcow
|
||||||
volumes:
|
volumes:
|
||||||
|
Reference in New Issue
Block a user