diff options
| author | Gregor Kleen <pngwjpgh@users.noreply.github.com> | 2016-10-27 16:36:10 +0200 |
|---|---|---|
| committer | Gregor Kleen <pngwjpgh@users.noreply.github.com> | 2016-10-27 16:36:10 +0200 |
| commit | 2378f973e772c49fb68fe11fac27dcf590f25376 (patch) | |
| tree | a82393880a070eb570e1a016617905a70ce5808c | |
| parent | 5bf2c2b9d7ed626ce730ecee06d0adc8e1c09618 (diff) | |
| download | nixos-2378f973e772c49fb68fe11fac27dcf590f25376.tar nixos-2378f973e772c49fb68fe11fac27dcf590f25376.tar.gz nixos-2378f973e772c49fb68fe11fac27dcf590f25376.tar.bz2 nixos-2378f973e772c49fb68fe11fac27dcf590f25376.tar.xz nixos-2378f973e772c49fb68fe11fac27dcf590f25376.zip | |
try to exclude LRZ-domains from spf checking
| -rw-r--r-- | ymir.nix | 16 |
1 files changed, 16 insertions, 0 deletions
| @@ -421,6 +421,22 @@ in rec { | |||
| 421 | permit_mynetworks, | 421 | permit_mynetworks, |
| 422 | permit_sasl_authenticated, | 422 | permit_sasl_authenticated, |
| 423 | reject_unauth_destination, | 423 | reject_unauth_destination, |
| 424 | check_sender_mx_access regex:${pkgs.writeText "spfpolicy" '' | ||
| 425 | /(^|\.)tu-muenchen\.de$/ DUNNO | ||
| 426 | /(^|\.)tum\.de$/ DUNNO | ||
| 427 | /(^|\.)lmu\.de$/ DUNNO | ||
| 428 | /(^|\.)uni-muenchen\.de$/ DUNNO | ||
| 429 | /(^|\.)lrz\.de$/ DUNNO | ||
| 430 | /(^|\.)badw-muenchen\.de$/ DUNNO | ||
| 431 | /(^|\.)badw\.de$/ DUNNO | ||
| 432 | /(^|\.)hm\.edu$/ DUNNO | ||
| 433 | /(^|\.)hswt\.de$/ DUNNO | ||
| 434 | /(^|\.)mhn\.de$/ DUNNO | ||
| 435 | /(^|\.)mwn\.de$/ DUNNO | ||
| 436 | /.*/ spfcheck | ||
| 437 | ''} | ||
| 438 | smtpd_restriction_classes = spfcheck | ||
| 439 | spfcheck = | ||
| 424 | check_policy_service unix:private/policy-spf | 440 | check_policy_service unix:private/policy-spf |
| 425 | 441 | ||
| 426 | smtpd_relay_restrictions = | 442 | smtpd_relay_restrictions = |