Merge branch 'master' of codeberg.org:snonux/conf

4 files changed, 11 insertions, 0 deletions

diff --git a/frontends/etc/mail/reject-domains b/frontends/etc/mail/reject-domains
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/frontends/etc/mail/reject-domains
diff --git a/frontends/etc/mail/reject-recipients b/frontends/etc/mail/reject-recipients
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/frontends/etc/mail/reject-recipients
diff --git a/frontends/etc/mail/reject-senders b/frontends/etc/mail/reject-senders
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/frontends/etc/mail/reject-senders
diff --git a/frontends/etc/mail/smtpd.conf.tpl b/frontends/etc/mail/smtpd.conf.tpl
index 7764b34..b43302d 100644
--- a/frontends/etc/mail/smtpd.conf.tpl
+++ b/frontends/etc/mail/smtpd.conf.tpl
@@ -10,6 +10,11 @@ table aliases file:/etc/mail/aliases
 table virtualdomains file:/etc/mail/virtualdomains
 table virtualusers file:/etc/mail/virtualusers
 
+# Reject lists for blocking unwanted senders/domains/recipients
+table reject-senders file:/etc/mail/reject-senders
+table reject-domains file:/etc/mail/reject-domains
+table reject-recipients file:/etc/mail/reject-recipients
+
 listen on socket
 listen on all tls pki "buetow_org_tls" hostname "<%= "$hostname.$domain" %>"
 #listen on all
@@ -18,6 +23,12 @@ action localmail mbox alias <aliases>
 action receive mbox virtual <virtualusers>
 action outbound relay
 
+# Reject rules (processed before accept rules)
+# reject-senders: full addresses, reject-domains: patterns like *@domain.com
+match from any mail-from <reject-senders> reject
+match from any mail-from <reject-domains> reject
+match from any for rcpt-to <reject-recipients> reject
+
 match from any for domain <virtualdomains> action receive
 match from local for local action localmail
 match from local for any action outbound