diff options
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/mail/templates/postfix/main.cf.j2 | 54 |
1 files changed, 13 insertions, 41 deletions
diff --git a/roles/mail/templates/postfix/main.cf.j2 b/roles/mail/templates/postfix/main.cf.j2 index 35093d9..ea0f9ec 100644 --- a/roles/mail/templates/postfix/main.cf.j2 +++ b/roles/mail/templates/postfix/main.cf.j2 @@ -173,50 +173,22 @@ mydestination = $myhostname, localhost.$mydomain, localhost # In particular, "trusted" SMTP clients are allowed to relay mail # through Postfix. See the 'smtpd_recipient_restrictions' parameter. # -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. +# * host: (default) trust only the local machine. +# * subnet: trust SMTP clients in the same IP subnetworks as the local +# machine. +# * class: trust SMTP clients in the same IP class A/B/C networks as +# the local machine. +# WARNING: Don't do this with a dial-up site - it would cause +# Postfix to "trust" your entire provider's network! Instead, +# specify an explicit mynetworks list by hand. # mynetworks_style = host -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). +# What destination domains (and subdomains thereof) this system will +# relay mail to, using the $relay_transport delivery. +# +# See also the description of "permit_auth_destination" and +# "reject_unauth_destination" SMTP recipient restrictions. # #relay_domains = $mydestination |