X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=mail-setup;h=ffc4bf17058bffa9d8752a4cd14204971356ee9a;hb=23a824d2e65674d73c8748b537fa0f3995113e94;hp=f43b6ba8b136ab697a19b210c5fd10b1109c87e9;hpb=25d20d07292550e8701e33aa409e4947f3075ede;p=distro-setup

diff --git a/mail-setup b/mail-setup
index f43b6ba..ffc4bf1 100755
--- a/mail-setup
+++ b/mail-setup
@@ -702,6 +702,13 @@ IGNORE_SMTP_LINE_LENGTH_LIMIT = true
 # keep your dkim signature intact but add list- headers.
 DKIM_SIGN_HEADERS = mime-version:in-reply-to:references:from:date:subject:to
 
+# recommended if dns is expected to work
+CHECK_RCPT_VERIFY_SENDER = true
+# seems like a good idea
+CHECK_DATA_VERIFY_HEADER_SENDER = true
+CHECK_RCPT_SPF = true
+CHECK_RCPT_REVERSE_DNS = true
+CHECK_MAIL_HELO_ISSUED = true
 EOF
 
 
@@ -866,7 +873,7 @@ EOF
 
 
   # light version of exim does not have sasl auth support.
-  pi exim4-daemon-heavy spamassassin
+  pi exim4-daemon-heavy spamassassin spf-tools-perl