smtpd.conf: Do a masquerade on senders table

Only lets people send using their proper addresses.

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

1 files changed, 7 insertions, 6 deletions

diff --git a/theos.kyriasis.com/smtpd.conf b/theos.kyriasis.com/smtpd.conf
index 03f1de5..7ef11dc 100644
--- a/theos.kyriasis.com/smtpd.conf
+++ b/theos.kyriasis.com/smtpd.conf
@@ -12,23 +12,24 @@ pki theos.kyriasis.com key "/etc/ssl/kyriasis-wosign/private.key"
 
 # If you edit the file, you have to run "smtpctl update table users"
 table users file:/etc/smtpd/users
+table sendertable file:/etc/smtpd/senders
 
 
 ##
 # Listen directives
 #
 
-listen on eth0 port 25  tls         pki theos.kyriasis.com auth-optional
-listen on eth0 port 587 tls-require pki theos.kyriasis.com auth
-listen on eth0 port 465 smtps       pki theos.kyriasis.com auth
+listen on ens4 port 25  tls         pki theos.kyriasis.com auth-optional senders <sendertable> masquerade
+listen on ens4 port 587 tls-require pki theos.kyriasis.com auth          senders <sendertable> masquerade
+listen on ens4 port 465 smtps       pki theos.kyriasis.com auth          senders <sendertable> masquerade
 
-listen on tun0 port 25  tls         pki theos.kyriasis.com auth-optional
-listen on tun0 port 587 tls-require pki theos.kyriasis.com auth
+listen on cjdns port 25  tls         pki theos.kyriasis.com auth-optional senders <sendertable> masquerade
+listen on cjdns port 587 tls-require pki theos.kyriasis.com auth          senders <sendertable> masquerade
 
 listen on lo port 10026 tag DKIM-IN
 listen on lo port 10029 tag DKIM-OUT
 
-listen on localhost
+listen on localhost senders <sendertable> masquerade
 
 
 ##