fix(postfix): update sender access and restrictions for improved security

dmzoneill · dmzoneill · commit 40e3ae52ef58 · 2025-07-05T10:17:50.000+01:00
diff --git a/roles/postfix/files/postfix/sender_access b/roles/postfix/files/postfix/sender_access
@@ -9,3 +9,4 @@ mail.medicalgarden.click     REJECT
 71.192.98.174                REJECT
 221.210.9.82                 REJECT
 73.17.235.113                REJECT
+feeditout.com                REJECT Stop spoofing our domain externally
diff --git a/roles/postfix/templates/main.cf.j2 b/roles/postfix/templates/main.cf.j2
@@ -38,9 +38,10 @@ smtpd_helo_restrictions =
     permit_sasl_authenticated
 
 smtpd_sender_restrictions =
-    check_sender_access hash:/etc/postfix/sender_access,
     permit_mynetworks,
-    permit_sasl_authenticated
+    permit_sasl_authenticated,
+    check_sender_access hash:/etc/postfix/sender_access,
+    reject
 
 # TLS
 smtpd_use_tls = yes
