class mail::base { # Postfix configuration postfix::config { "mydomain": value => "$::domain"; "myhostname": value => "$::fqdn"; "mydestination": value => "${mail::system::mydestination}"; "mynetworks": value => "${mail::system::mynetworks}"; "relay_domains": value => "${mail::system::real_relay_domains}"; "transport_maps": value => "hash:/etc/postfix/transport, regexp:/etc/postfix/transport_regexp"; "mailbox_command": value => '/usr/bin/maildrop -d ${USER}'; "virtual_mailbox_base": value => '/var/mail/virtual'; "virtual_uid_maps": value => 'static:5000'; "virtual_gid_maps": value => 'static:5000'; "recipient_delimiter": value => '+'; } # Postgrey port configuration $postgrey_port = $::lsbdistcodename ? { 'lenny' => '60000', default => '10023', } # Recipient restrictions postfix::config { "smtpd_recipient_restrictions": value => "permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client psbl.surriel.com, check_policy_service unix:private/policyd-spf, check_policy_service inet:127.0.0.1:${postgrey_port}" } postfix::hash { "/etc/postfix/virtual": ensure => present, } postfix::config { "policy-spf_time_limit": value => "3600", } postfix::hash { "/etc/postfix/transport": ensure => present, } # See http://www.gtkdb.de/index_7_2274.html postfix::config { 'inet_protocols': value => lookup('mail::base::inet_protocols', undef, undef, 'ipv4'), } }