aboutsummaryrefslogtreecommitdiff
path: root/cluster/prod/app/email/config
diff options
context:
space:
mode:
authorArmael <armael@noreply.localhost>2024-11-21 17:49:15 +0000
committerArmael <armael@noreply.localhost>2024-11-21 17:49:15 +0000
commit90f861e1e12ebaa232225ff22f7782af1cff563c (patch)
treee27ea8432dd89559f7a3bd16e62e2760f62bb292 /cluster/prod/app/email/config
parent3f51534e0335e1335312adebf8a285abcf9faf1b (diff)
parente0385b0456cbd5f64e5464d0b6a36171ba770ba6 (diff)
downloadnixcfg-90f861e1e12ebaa232225ff22f7782af1cff563c.tar.gz
nixcfg-90f861e1e12ebaa232225ff22f7782af1cff563c.zip
Merge pull request 'postfix: add rate-limiting exceptions for our own nodes' (#39) from postfix-rate-limit-exceptions into main
Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/nixcfg/pulls/39
Diffstat (limited to 'cluster/prod/app/email/config')
-rw-r--r--cluster/prod/app/email/config/postfix/main.cf7
1 files changed, 5 insertions, 2 deletions
diff --git a/cluster/prod/app/email/config/postfix/main.cf b/cluster/prod/app/email/config/postfix/main.cf
index 5593716..ca9c87d 100644
--- a/cluster/prod/app/email/config/postfix/main.cf
+++ b/cluster/prod/app/email/config/postfix/main.cf
@@ -83,11 +83,14 @@ smtpd_forbid_unauth_pipelining = yes
smtpd_discard_ehlo_keywords = chunking
smtpd_forbid_bare_newline = yes
-smtpd_client_connection_rate_limit = 2
-
#===
# Rate limiting
#===
+smtpd_client_connection_rate_limit = 2
+# do not rate-limit ourselves
+# in particular, useful for forgejo who opens a lot of SMTP connections
+smtpd_client_event_limit_exceptions = $mynetworks /etc/postfix/rate-limit-exceptions
+
slow_destination_recipient_limit = 20
slow_destination_concurrency_limit = 2