Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Remove chunking error messages in gateway systems

Browse source 
RHEL turned off chunking in postfix for various reasons. This causes a
lot of logs from spam and other servers. Turning off logging this as
it is not supported.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
This commit is contained in:
Stephen Smoogen 2023-06-26 13:47:33 -04:00 • committed by kevin
parent 4cd0dea659
commit 19b500a5fd
4 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/base/files/postfix/main.cf/main.cf.gateway
View file

@ -778,3 +778,8 @@ smtpd_relay_restrictions = permit_mynetworks, reject_unauth_destination
# This avoids us sending them and causing SPF failures.
# It depends on them allowing us to relay email out.
sender_dependent_relayhost_maps = hash:/etc/postfix/bysender
# RHEL postfix disables RFC3030 CHUNKING by default for security reasons
# http://www.postfix.org/BDAT_README.html
# but does so in a way which is noisy with logs. Turn it off without logging.
smtpd_discard_ehlo_keywords = chunking, silent-discard

5
roles/base/files/postfix/main.cf/main.cf.smtp-mm
View file

@ -741,3 +741,8 @@ smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtpd_sender_restrictions = regexp:/etc/postfix/sender_access
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
compatibility_level = 2
# RHEL postfix disables RFC3030 CHUNKING by default for security reasons
# http://www.postfix.org/BDAT_README.html
# but does so in a way which is noisy with logs. Turn it off without logging.
smtpd_discard_ehlo_keywords = chunking, silent-discard

5
roles/base/files/postfix/main.cf/main.cf.vpn.pagure
View file

@ -730,3 +730,8 @@ tls_eecdh_ultra_curve = secp384r1
# as outlined http://www.postfix.org/SMTPD_ACCESS_README.html
# At least one is required to receive email
smtpd_relay_restrictions = permit_mynetworks, reject_unauth_destination
# RHEL postfix disables RFC3030 CHUNKING by default for security reasons
# http://www.postfix.org/BDAT_README.html
# but does so in a way which is noisy with logs. Turn it off without logging.
smtpd_discard_ehlo_keywords = chunking, silent-discard

5
roles/base/files/postfix/main.cf/main.cf.vpn.pagure-stg
View file

@ -730,3 +730,8 @@ tls_eecdh_ultra_curve = secp384r1
# as outlined http://www.postfix.org/SMTPD_ACCESS_README.html
# At least one is required to receive email
smtpd_relay_restrictions = permit_mynetworks, reject_unauth_destination
# RHEL postfix disables RFC3030 CHUNKING by default for security reasons
# http://www.postfix.org/BDAT_README.html
# but does so in a way which is noisy with logs. Turn it off without logging.
smtpd_discard_ehlo_keywords = chunking, silent-discard