shithub: front

Download patch

ref: 4a9c478b992167342863a85a3f614099bc434239
parent: d9fa8fc465f9a4397db69ebc51a452f5557750e2
author: mia soweli <mia@soweli.net>
date: Sat Aug 16 13:50:46 EDT 2025

upas/smtpd: improve default configuration

how about not relaying by default, and verifying sender domains.
plus use domain names and ip ranges that are actually reserved
for documentation use.

--- a/sys/lib/dist/mail/lib/smtpd.conf
+++ b/sys/lib/dist/mail/lib/smtpd.conf
@@ -1,14 +1,14 @@
 #
-#	sample smtpd configuration options for inside connections
+#	sample smtpd configuration options
 #
 
 #
-#	replace YOURDOM with the name of your domain
-#	replace 10.0.0.0 with the IP address range of your networks
+#	replace example.com with the name of your domain
+#	replace 192.0.2.0/24 with the IP address range of your networks
 
-defaultdomain		YOURDOM.com
-norelay			off	#allow relaying
-verifysenderdom		off	#disable dns verification of sender domain
+defaultdomain		example.com
+norelay			on	#deny relaying
+verifysenderdom		on	#require dns verification of sender domain
 saveblockedmsg		off	#save blocked messages
 
 #
@@ -17,6 +17,6 @@
 # as well as the domains to accept mail for
 #
 
-# ournets 192.168.0.0/16
+# ournets 192.0.2.0/24
+# ourdomains *.example.com, example.com
 
-# ourdomains *.fakedom.dom, *.fakedom.rog
--