iankelling.org
/
git
/
distro-setup
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
various fixes
[distro-setup]
/
mail-setup
diff --git
a/mail-setup
b/mail-setup
index f43b6ba8b136ab697a19b210c5fd10b1109c87e9..0c3f0bd7133452e7ea73927ffbb558d929aa6657 100755
(executable)
--- a/
mail-setup
+++ b/
mail-setup
@@
-131,7
+131,7
@@
fi
# # 2017-02 spf policies:
# # host -t txt lists.fedoraproject.org
# # 2017-02 spf policies:
# # host -t txt lists.fedoraproject.org
-# # google ~all, hotmail
-all, yahoo: ?all, fastmail ?
all
+# # google ~all, hotmail
~all, yahoo: ?all, fastmail ?all, outlook ~
all
# # i include fastmail\'s settings, per their instructions,
# # and follow their policy. In mail in a box, or similar instructions,
# # I\'ve seen recommended to not use a restrictive policy.
# # i include fastmail\'s settings, per their instructions,
# # and follow their policy. In mail in a box, or similar instructions,
# # I\'ve seen recommended to not use a restrictive policy.
@@
-702,6
+702,13
@@
IGNORE_SMTP_LINE_LENGTH_LIMIT = true
# keep your dkim signature intact but add list- headers.
DKIM_SIGN_HEADERS = mime-version:in-reply-to:references:from:date:subject:to
# keep your dkim signature intact but add list- headers.
DKIM_SIGN_HEADERS = mime-version:in-reply-to:references:from:date:subject:to
+# recommended if dns is expected to work
+CHECK_RCPT_VERIFY_SENDER = true
+# seems like a good idea
+CHECK_DATA_VERIFY_HEADER_SENDER = true
+CHECK_RCPT_SPF = true
+CHECK_RCPT_REVERSE_DNS = true
+CHECK_MAIL_HELO_ISSUED = true
EOF
EOF
@@
-866,7
+873,7
@@
EOF
# light version of exim does not have sasl auth support.
# light version of exim does not have sasl auth support.
- pi exim4-daemon-heavy spamassassin
+ pi exim4-daemon-heavy spamassassin
spf-tools-perl