aboutsummaryrefslogtreecommitdiffstats
path: root/script/rails-post-deploy
diff options
context:
space:
mode:
authorMark Longair <mhl@pobox.com>2013-11-05 14:31:05 +0000
committerMark Longair <mhl@pobox.com>2013-11-07 15:46:56 +0000
commit5b1c747a0d86164cc15d13ef1dcbb90f8290ee8b (patch)
treed1df2c21cae40a365c549e092c90f6666598a35a /script/rails-post-deploy
parent9aec34062f813dd5593815e0ca83aac5ff6766af (diff)
Reduce "backscatter" bounce risk by setting local_recipient_maps
Leaving the local_recipient_maps setting empty has a risk which is described in the Postfix manual: "[...] That is, an empty value. With this setting, the Postfix SMTP server will not reject mail with "User unknown in local recipient table". Don't do this on systems that receive mail directly from the Internet. With today's worms and viruses, Postfix will become a backscatter source: it accepts mail for non-existent recipients and then tries to return that mail as "undeliverable" to the often forged sender address." This commit changes the local_recipient_maps setting to only accept (and potentially bounce) emails where the local part is known (one that we've mentioned in general.yml) or to a Unix user that exists. Fixes #1166
Diffstat (limited to 'script/rails-post-deploy')
0 files changed, 0 insertions, 0 deletions