mirror of
https://github.com/iredmail/iRedMail
synced 2026-06-08 14:51:59 +00:00
Zhang Huangbin
29 lines
717 B
Plaintext
29 lines
717 B
Plaintext
# Basic PF rules for mail server.
|
|
|
|
mail_services="{www, https, smtp, submission, imap, imaps, pop3, pop3s, ssh}"
|
|
|
|
#table <spamd-white> persist
|
|
#table <nospamd> persist file "/etc/mail/nospamd"
|
|
#table <fail2ban> persist
|
|
|
|
# Options
|
|
set block-policy drop
|
|
set skip on lo
|
|
|
|
# Block all
|
|
block log all
|
|
|
|
# Fail2ban
|
|
#block in quick on egress proto tcp from <fail2ban> to any
|
|
|
|
pass out
|
|
|
|
# rules for spamd(8)
|
|
#pass in on egress proto tcp from any to any port smtp \
|
|
# divert-to 127.0.0.1 port spamd
|
|
#pass in on egress proto tcp from <nospamd> to any port smtp
|
|
#pass in log on egress proto tcp from <spamd-white> to any port smtp
|
|
|
|
# Access to other mail services
|
|
pass in on egress proto tcp from any to any port $mail_services
|