summaryrefslogtreecommitdiffstats
path: root/deploy/postfix/victor-master.cf.fragment
diff options
context:
space:
mode:
authorGab <24553253+gabrix73@users.noreply.github.com>2026-08-16 17:35:18 +0200
committerGab <24553253+gabrix73@users.noreply.github.com>2026-08-16 17:35:18 +0200
commit294a05ead630776149db1e5cd637a40cf6875ee9 (patch)
tree4d2eee6086e8b42001f9029822db95e3a6729ad3 /deploy/postfix/victor-master.cf.fragment
parent404b81223688be027629f60ec5b1a00203da1768 (diff)
downloadm2usenet-and-mail2news-294a05ead630776149db1e5cd637a40cf6875ee9.tar.gz
m2usenet-and-mail2news-294a05ead630776149db1e5cd637a40cf6875ee9.tar.xz
m2usenet-and-mail2news-294a05ead630776149db1e5cd637a40cf6875ee9.zip
Secure private onion Mail2News ingress
Diffstat (limited to 'deploy/postfix/victor-master.cf.fragment')
-rw-r--r--deploy/postfix/victor-master.cf.fragment13
1 files changed, 13 insertions, 0 deletions
diff --git a/deploy/postfix/victor-master.cf.fragment b/deploy/postfix/victor-master.cf.fragment
new file mode 100644
index 0000000..9012438
--- /dev/null
+++ b/deploy/postfix/victor-master.cf.fragment
@@ -0,0 +1,13 @@
+# Restricted target for the legacy qee4 hidden service. Do not forward it to
+# the ordinary SMTP listener, which may trust loopback through mynetworks.
+127.0.0.1:2527 inet n - n - 4 smtpd
+ -o syslog_name=postfix/qee-onion
+ -o myhostname=qee4i7sags6phsvb2yodwecfj7noimfhhalsjktsvikrwotxzis3raad.onion
+ -o smtpd_tls_security_level=none
+ -o smtpd_sasl_auth_enable=no
+ -o smtpd_relay_restrictions=reject_unauth_destination
+ -o smtpd_recipient_restrictions=reject_unauth_destination
+ -o smtpd_reject_unlisted_recipient=yes
+ -o smtpd_helo_required=yes
+ -o smtpd_recipient_limit=1
+ -o message_size_limit=131072