Compare commits
12 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
ca9ff3cba6
|
|||
|
6cd2b001d6
|
|||
|
295cc587b3
|
|||
|
bc912f9127
|
|||
|
5b0b6b0589
|
|||
|
cb5b774f5d
|
|||
|
c6faeaed2e
|
|||
|
4164c340df
|
|||
|
a8e7e83881
|
|||
|
173f80b50d
|
|||
|
f57a2fedb4
|
|||
|
6fc0a1ed17
|
@@ -12,6 +12,6 @@ WORKDIR /etc/exim
|
|||||||
|
|
||||||
EXPOSE 25
|
EXPOSE 25
|
||||||
|
|
||||||
CMD [ "/usr/sbin/exim", "-bd", "-q15m", "-v" ]
|
CMD [ "/usr/sbin/exim", "-bdf", "-q15m" ]
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -32,6 +32,14 @@ spec:
|
|||||||
- name: smtp
|
- name: smtp
|
||||||
containerPort: 25
|
containerPort: 25
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
|
readinessProbe:
|
||||||
|
tcpSocket:
|
||||||
|
port: 25
|
||||||
|
initialDelaySeconds: 5
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
successThreshold: 1
|
||||||
|
failureThreshold: 3
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: exim-config
|
- name: exim-config
|
||||||
mountPath: /etc/exim/db
|
mountPath: /etc/exim/db
|
||||||
@@ -66,6 +74,7 @@ metadata:
|
|||||||
name: exim-forwarder
|
name: exim-forwarder
|
||||||
spec:
|
spec:
|
||||||
type: LoadBalancer
|
type: LoadBalancer
|
||||||
|
externalTrafficPolicy: Local
|
||||||
selector:
|
selector:
|
||||||
app: exim-forwarder
|
app: exim-forwarder
|
||||||
ports:
|
ports:
|
||||||
|
|||||||
16
exim.conf
16
exim.conf
@@ -6,11 +6,9 @@ tls_advertise_hosts = *
|
|||||||
tls_certificate = /etc/exim/ssl/server.crt
|
tls_certificate = /etc/exim/ssl/server.crt
|
||||||
tls_privatekey = /etc/exim/ssl/server.key
|
tls_privatekey = /etc/exim/ssl/server.key
|
||||||
|
|
||||||
log_output = syslog
|
log_file_path = /var/log/exim/mainlog
|
||||||
syslog_facility = mail
|
log_selector = -all
|
||||||
syslog_tag = exim-forwarder
|
message_logs = true
|
||||||
syslog_host = 172.20.0.10
|
|
||||||
syslog_port = 514
|
|
||||||
|
|
||||||
|
|
||||||
# acl_smtp_connect = acl_connect
|
# acl_smtp_connect = acl_connect
|
||||||
@@ -32,11 +30,11 @@ acl_helo:
|
|||||||
|
|
||||||
acl_rcpt:
|
acl_rcpt:
|
||||||
# recipient verification
|
# recipient verification
|
||||||
deny message = User unknown
|
deny message = Access denied (1)
|
||||||
!verify = recipient
|
!verify = recipient
|
||||||
|
|
||||||
# SPF check
|
# SPF check
|
||||||
deny message = Access denied (1)
|
deny message = Access denied (2)
|
||||||
spf = fail
|
spf = fail
|
||||||
|
|
||||||
# Greylisting
|
# Greylisting
|
||||||
@@ -44,12 +42,12 @@ acl_rcpt:
|
|||||||
!seen = 72h / key=${sender_address}_${local_part}@${domain}
|
!seen = 72h / key=${sender_address}_${local_part}@${domain}
|
||||||
|
|
||||||
# Rate limit
|
# Rate limit
|
||||||
deny message = Access denied (2)
|
deny message = Access denied (3)
|
||||||
ratelimit = 10 / 10m / strict
|
ratelimit = 10 / 10m / strict
|
||||||
|
|
||||||
accept condition = ${if match_domain{$domain}{+forward_domains}{yes}{no}}
|
accept condition = ${if match_domain{$domain}{+forward_domains}{yes}{no}}
|
||||||
|
|
||||||
deny message = Access denied (x)
|
deny message = Access denied (4)
|
||||||
|
|
||||||
acl_data:
|
acl_data:
|
||||||
warn dkim_status = invalid
|
warn dkim_status = invalid
|
||||||
|
|||||||
Reference in New Issue
Block a user