X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=mail-setup;h=ffc4bf17058bffa9d8752a4cd14204971356ee9a;hb=8a6b446c7e336596af614c853e1c6177e55a7983;hp=c1db3c7fc8bbd9697cfc3b9bf29c83ed7667d356;hpb=0b6d44c7f3d567e0a26138509c8a24cb57c69b50;p=distro-setup

diff --git a/mail-setup b/mail-setup
index c1db3c7..ffc4bf1 100755
--- a/mail-setup
+++ b/mail-setup
@@ -205,7 +205,7 @@ pi() { # package install
 
 postmaster=$u
 mxhost=mail.iankelling.org
-mxport=25
+mxport=587
 forward=$u@$mxhost
 
 # old setup. left as comment for example
@@ -642,7 +642,11 @@ EOF
     # MAIN_HARDCODE_PRIMARY_HOSTNAME might mess up the
     # smarthost config type, not sure. all other settings
     # would be unused in that config type.
-    cat >/etc/exim4/conf.d/main/000_localmacros <<EOF
+    rm -f /etc/exim4/conf.d/main/000_localmacros # old filename
+    cat >/etc/exim4/conf.d/main/000_local <<EOF
+# enable 587 in addition to the default 25, so that
+# i can send mail where port 25 is firewalled by isp
+daemon_smtp_ports = 25 : 587
 # i don't have ipv6 setup for my vpn tunnel yet.
 disable_ipv6 = true
 
@@ -698,6 +702,13 @@ IGNORE_SMTP_LINE_LENGTH_LIMIT = true
 # keep your dkim signature intact but add list- headers.
 DKIM_SIGN_HEADERS = mime-version:in-reply-to:references:from:date:subject:to
 
+# recommended if dns is expected to work
+CHECK_RCPT_VERIFY_SENDER = true
+# seems like a good idea
+CHECK_DATA_VERIFY_HEADER_SENDER = true
+CHECK_RCPT_SPF = true
+CHECK_RCPT_REVERSE_DNS = true
+CHECK_MAIL_HELO_ISSUED = true
 EOF
 
 
@@ -862,7 +873,7 @@ EOF
 
 
   # light version of exim does not have sasl auth support.
-  pi exim4-daemon-heavy spamassassin
+  pi exim4-daemon-heavy spamassassin spf-tools-perl