ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(common): add host-tree file/template overrides and skip global items when host overrides exist

Browse Source
This commit is contained in:
Christoph
2026-07-27 21:55:27 +02:00
parent b40d3249fb
commit f39babaf5d
33 changed files with 1148 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/common/files/mailserver/etc/postfix/postfwd.cf
+22 -3
View File
@@ -160,10 +160,29 @@ id=RATE_UNKNOWN_CLIENT_ADDR
client_name==unknown
action=rate(client_address/5/300/450 4.7.1 only 5 recipients per 5 minutes allowed)
# Ausnahme vom 50/Minute-Limit: IPs aus der Whitelist-Datei
# duerfen bis zu 100 Nachrichten/Minute senden. 'final=yes'
# sorgt dafuer, dass fuer diese IPs die nachfolgende
# RATE_CLIENT_ADDR-Regel NICHT mehr zusaetzlich ausgewertet wird.
id=HIGH_RATE_CLIENT_ADDR
&&INCOMING
client_address=cidr:/etc/postfix/postfwd.high_rate_ip
action=rate($$client_address/100/60/421 421 4.7.0 Too many connections (150/m) from $$client_address)
final=yes
# Ausnahme vom 50/Minute-Limit auf Basis des Client-Hostnamens
# (Reverse-DNS/PTR). 'final=yes' verhindert die zusaetzliche
# Auswertung der nachfolgenden RATE_CLIENT_ADDR-Regel.
id=HIGH_RATE_CLIENT_NAME
&&INCOMING
client_name=pcre:/etc/postfix/postfwd.high_rate_hostname
action=rate($$client_address/100/60/421 421 4.7.0 Too many connections (150/m) from $$client_address ($$client_name))
final=yes
# Block clients (ip-addresses) sending more than 50 messages per minute exceeded. Error:RATE_CLIENT)
id=RATE_CLIENT_ADDR
&&INCOMING
action=rate($$client_address/50/60/421 421 4.7.0 Too many connections from $$client_address)
action=rate($$client_address/50/60/421 421 4.7.0 Too many connections (50/m) from $$client_address)
# Block messages with more than 50 recipients
id=BLOCK_MSG_RCPT
@@ -172,7 +191,7 @@ id=BLOCK_MSG_RCPT
recipient_count=90
action=REJECT Too many recipients, please reduce to less than 90 or consider using a mailing list. Error: BLOCK_MSG_RCPT
# Higher rate limit for users in exception list
# Higher rate limit for users in exception list (limit: 500 messages/hour)
id=RATE_MSG_EXCEPTION
&&INCOMING
&&SASL_AUTH
@@ -185,7 +204,7 @@ id=RATE_MSG
&&SASL_AUTH
action=rate($$sasl_username/50/3600/450 4.7.1 Number messages per hour exceeded. Error:RATE_MSG)
# Higher recipient rate limit for specific users from file
# Higher recipient rate limit for specific users from file (limit: 1000 recipients total/hour)
id=RATE_RCPT_HIGH
&&INCOMING
&&SASL_AUTH