diff options
author | Mark Longair <mhl@pobox.com> | 2013-11-05 14:31:05 +0000 |
---|---|---|
committer | Mark Longair <mhl@pobox.com> | 2013-11-07 15:46:56 +0000 |
commit | 5b1c747a0d86164cc15d13ef1dcbb90f8290ee8b (patch) | |
tree | d1df2c21cae40a365c549e092c90f6666598a35a /script/make-crontab | |
parent | 9aec34062f813dd5593815e0ca83aac5ff6766af (diff) |
Reduce "backscatter" bounce risk by setting local_recipient_maps
Leaving the local_recipient_maps setting empty has a risk which is
described in the Postfix manual:
"[...] That is, an empty value. With this setting, the Postfix SMTP
server will not reject mail with "User unknown in local recipient
table". Don't do this on systems that receive mail directly from
the Internet. With today's worms and viruses, Postfix will become a
backscatter source: it accepts mail for non-existent recipients and
then tries to return that mail as "undeliverable" to the often
forged sender address."
This commit changes the local_recipient_maps setting to only accept
(and potentially bounce) emails where the local part is known (one
that we've mentioned in general.yml) or to a Unix user that exists.
Fixes #1166
Diffstat (limited to 'script/make-crontab')
0 files changed, 0 insertions, 0 deletions