unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 7 Actions Packages Projects Releases Wiki Activity

mail: use real edge MTA public IPs (#556)

Browse Source 
The edge gateways now exist, so the smarthost and rspamd trust their real public IPs instead of the TEST-NET placeholders.

- set mta1 (66.226.148.207) and mta2 (66.226.149.50) in smarthost gateways.cidr
- allow both in the smarthost NetworkPolicy
- trust both in the rspamd external_relay ip_map

Reviewed-on: #556
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>
This commit was merged in pull request #556.
This commit is contained in:
Unkin Agent
2026-10-17 12:51:26 +11:00
committed by BenVincent
parent 331d96278d
commit 3057392c35
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/base/mail/rspamd/external_relay.conf
+1 -1
View File
@@ -3,6 +3,6 @@ enabled = true;
rules {
EDGE_RELAY {
strategy = "ip_map";
ip_map = ["192.0.2.1/32", "192.0.2.2/32"];
ip_map = ["66.226.148.207/32", "66.226.149.50/32"];
}
}
apps/base/mail/smarthost-networkpolicy.yaml
+2 -2
View File
@@ -14,9 +14,9 @@ spec:
ingress:
- from:
- ipBlock:
cidr: 192.0.2.1/32
cidr: 66.226.148.207/32
- ipBlock:
cidr: 192.0.2.2/32
cidr: 66.226.149.50/32
- ipBlock:
cidr: 10.10.12.200/32
- ipBlock:
apps/base/mail/smarthost/gateways.cidr
+3 -3
View File
@@ -1,3 +1,3 @@
# Gateway (mta1/mta2) public IPs; TEST-NET placeholders until the BinaryLane servers exist.
192.0.2.1/32 reject_plaintext_session, permit
192.0.2.2/32 reject_plaintext_session, permit
# Gateway (mta1/mta2) public IPs: ausyd2nxvm2130, aubne1nxvm2132.
66.226.148.207/32 reject_plaintext_session, permit
66.226.149.50/32 reject_plaintext_session, permit