disable SMTP AUTH on port 25 to stop it accidentally being used for submission

fixes #830
This commit is contained in:
Joshua Tauberer
2018-11-30 10:46:54 -05:00
parent b05b06c74a
commit aa52f52d02
2 changed files with 9 additions and 2 deletions
+6 -2
View File
@@ -65,11 +65,15 @@ service auth {
}
EOF
# And have Postfix use that service.
# And have Postfix use that service. We *disable* it here
# so that authentication is not permitted on port 25 (which
# does not run DKIM on relayed mail, so outbound mail isn't
# correct, see #830), but we enable it specifically for the
# submission port.
tools/editconf.py /etc/postfix/main.cf \
smtpd_sasl_type=dovecot \
smtpd_sasl_path=private/auth \
smtpd_sasl_auth_enable=yes
smtpd_sasl_auth_enable=no
# ### Sender Validation