Postfix Custom Config

[MiamiJack]

Hello All,

Two Part question:

In trying to tighten up spam blocking some of the configuration options we used on postfix servers were to use the following configuration options:

It seems like there are 1 or 2 settings (Reject Unknown Clients, Reject Unknown Senders) directed towards postfix from the gui, but not all of the options are there.

How should I push my desired options to postfix the best practice way? ( Settings list below)
I did read a few threads, one thread talking about editing a template so it pushed custom config onto postfix, but that is now frowned upon, so the question is, what is the proper way to do this today?

And secondly some of these commands could be easily added to the code to make it part of the gui making it easier to enforce polices to better reject spam, but I want to follow protocol and see if others agree and if it's a reasonable request.

Settings:
biff = no
soft_bounce = no
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
smtpd_helo_required = yes
smtpd_hard_error_limit = 3
smtpd_junk_command_limit = 3
reject_unknown_recipient_domain,


Thank you!

 

[dcsapak]

I did read a few threads, one thread talking about editing a template so it pushed custom config onto postfix, but that is now frowned upon, so the question is, what is the proper way to do this today?

the templating system is still the way to go, where did you read that it is frowned upon? https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_template_engine

And secondly some of these commands could be easily added to the code to make it part of the gui making it easier to enforce polices to better reject spam, but I want to follow protocol and see if others agree and if it's a reasonable request.

you can open feature requests on https://bugzilla.proxmox.com but please also write why you think they'd make good additions to the already exposed settings

 

[koby]

Hello All,

Two Part question:

In trying to tighten up spam blocking some of the configuration options we used on postfix servers were to use the following configuration options:

It seems like there are 1 or 2 settings (Reject Unknown Clients, Reject Unknown Senders) directed towards postfix from the gui, but not all of the options are there.

How should I push my desired options to postfix the best practice way? ( Settings list below)
I did read a few threads, one thread talking about editing a template so it pushed custom config onto postfix, but that is now frowned upon, so the question is, what is the proper way to do this today?

And secondly some of these commands could be easily added to the code to make it part of the gui making it easier to enforce polices to better reject spam, but I want to follow protocol and see if others agree and if it's a reasonable request.

Settings:
biff = no
soft_bounce = no
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
smtpd_helo_required = yes
smtpd_hard_error_limit = 3
smtpd_junk_command_limit = 3
reject_unknown_recipient_domain,


Thank you!

I will implement that in my server too.
Thank you.

 

[MiamiJack]

Hello,

If I copy the template file to the destination specified, what happens if you update your main.cf file?
My guess would be mine would be outdated.
Should it be where we have our file with our additional settings and simply append ours if it exists to the end of the file?

Thanks!

 

[MiamiJack]

FYI when I run the script to update postfix I get the below error:

root@mgw:/etc/postfix# pmgconfig sync --restart 1
Use of uninitialized value $domain in concatenation (.) or string at /usr/share/perl5/PMG/Utils.pm line 629.

 

[Stoiko Ivanov]

Use of uninitialized value $domain in concatenation (.) or string at /usr/share/perl5/PMG/Utils.pm line 629.

what's the content of /etc/resolv.conf
PMG uses the search setting there for the domain-name of the system - see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_configuration_files_overview

I hope this helps!