From 294a05ead630776149db1e5cd637a40cf6875ee9 Mon Sep 17 00:00:00 2001
From: Gab <24553253+gabrix73@users.noreply.github.com>
Date: Sun, 16 Aug 2026 17:35:18 +0200
Subject: Secure private onion Mail2News ingress

---
 deploy/postfix/victor-master.cf.fragment | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 deploy/postfix/victor-master.cf.fragment

(limited to 'deploy/postfix/victor-master.cf.fragment')

diff --git a/deploy/postfix/victor-master.cf.fragment b/deploy/postfix/victor-master.cf.fragment
new file mode 100644
index 0000000..9012438
--- /dev/null
+++ b/deploy/postfix/victor-master.cf.fragment
@@ -0,0 +1,13 @@
+# Restricted target for the legacy qee4 hidden service. Do not forward it to
+# the ordinary SMTP listener, which may trust loopback through mynetworks.
+127.0.0.1:2527 inet n - n - 4 smtpd
+  -o syslog_name=postfix/qee-onion
+  -o myhostname=qee4i7sags6phsvb2yodwecfj7noimfhhalsjktsvikrwotxzis3raad.onion
+  -o smtpd_tls_security_level=none
+  -o smtpd_sasl_auth_enable=no
+  -o smtpd_relay_restrictions=reject_unauth_destination
+  -o smtpd_recipient_restrictions=reject_unauth_destination
+  -o smtpd_reject_unlisted_recipient=yes
+  -o smtpd_helo_required=yes
+  -o smtpd_recipient_limit=1
+  -o message_size_limit=131072
-- 
cgit v1.2.3