bokysan/docker-postfix
1
1
Fork 0
mirror of https://github.com/bokysan/docker-postfix.git synced 2025-09-04 05:25:54 +08:00
Code Issues Projects Releases Packages Wiki Activity

Add smtpd sender sasl authentication

Browse source
This commit is contained in:
vcazsdk 2022-08-29 15:49:08 +02:00 • committed by Boky
parent b6eaa3e838
commit f2daefd7e1
3 changed files with 35 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
build-scripts/postfix-install.sh
View file

@ -17,7 +17,7 @@ do_ubuntu() {
apt-get install -y libsasl2-modules
apt-get install -y postfix
apt-get install -y opendkim
apt-get install -y ca-certificates tzdata supervisor rsyslog bash opendkim-tools curl libcurl4 libjsoncpp1 postfix-lmdb netcat
apt-get install -y ca-certificates tzdata supervisor rsyslog bash opendkim-tools curl libcurl4 libjsoncpp1 sasl2-bin postfix-lmdb netcat
}
if [ -f /etc/alpine-release ]; then

34
scripts/common-run.sh
View file

@ -306,6 +306,33 @@ postfix_setup_xoauth2_post_setup() {
fi
}
postfix_setup_smtpd_sasl_auth() {
if [ ! -z "$SMTPD_SASL_USERS" ]; then
info "Enable smtpd sasl auth."
do_postconf -e "smtpd_sasl_auth_enable=yes"
do_postconf -e "broken_sasl_auth_clients=yes"
[ ! -d /etc/postfix/sasl ] && mkdir /etc/postfix/sasl
cat >> /etc/postfix/sasl/smtpd.conf <<EOF
pwcheck_method: auxprop
auxprop_plugin: sasldb
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5 NTLM
EOF
[ ! -d /etc/sasl2 ] && mkdir /etc/sasl2
ln -s /etc/postfix/sasl/smtpd.conf /etc/sasl2/
# sasldb2
echo $SMTPD_SASL_USERS | tr , \\n > /tmp/passwd
while IFS=':' read -r _user _pwd; do
echo $_pwd | saslpasswd2 -p -c $_user
done < /tmp/passwd
rm -f /tmp/passwd
chown postfix:postfix /etc/sasldb2
fi
}
postfix_setup_networks() {
if [ ! -z "$MYNETWORKS" ]; then
deprecated "${emphasis}MYNETWORKS${reset} variable is deprecated. Please use ${emphasis}POSTFIX_mynetworks${reset} instead."
@ -352,7 +379,11 @@ postfix_setup_sender_domains() {
echo
postmap lmdb:$allowed_senders
do_postconf -e "smtpd_recipient_restrictions=reject_non_fqdn_recipient, reject_unknown_recipient_domain, check_sender_access lmdb:$allowed_senders, reject"
if [ ! -z "$SMTPD_SASL_USERS" ]; then
smtpd_sasl="permit_sasl_authenticated,"
fi
do_postconf -e "smtpd_recipient_restrictions=reject_non_fqdn_recipient, reject_unknown_recipient_domain, check_sender_access lmdb:$allowed_senders, $smtpd_sasl reject"
# Since we are behind closed doors, let's just permit all relays.
do_postconf -e "smtpd_relay_restrictions=permit"
@ -579,4 +610,5 @@ unset_sensible_variables() {
unset XOAUTH2_SECRET
unset XOAUTH2_INITIAL_ACCESS_TOKEN
unset XOAUTH2_INITIAL_REFRESH_TOKEN
unset SMTPD_SASL_USERS
}

1
scripts/run.sh
View file

@ -29,6 +29,7 @@ postfix_setup_sender_domains # Configure allowed sender domains
postfix_setup_masquarading # Setup masquaraded domains
postfix_setup_header_checks # Enable SMTP header checks, if defined
postfix_setup_dkim # Configure DKIM, if enabled
postfix_setup_smtpd_sasl_auth # Enable sender sasl auth, if defined
postfix_custom_commands # Apply custom postfix settings
opendkim_custom_commands # Apply custom OpenDKIM settings
postfix_open_submission_port # Enable the submission port