dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

zabbix-server: Only allow local SMTP relay

Browse Source 
The Zabbix server also serves an SMTP relay, to minimize reliance on
external services when sending notifications. Since it inherits
configuration of the relay from the general *smtp-relay* group, it ends
up allowing all hosts to relay off of it. To avoid this, we set
`smtp_rmynetworks` at the *zabbix-server* group level to only allow the
local machine to relay messages.
This commit is contained in:
Dustin
2018-10-13 11:32:17 -05:00
parent 2b43a85c78
commit cdf2869ef1
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
group_vars/zabbix-server.yml
View File

@@ -5,3 +5,4 @@ pg_hba_extra:
user: zabbix user: zabbix
address: '' address: ''
method: md5 method: md5
smtp_mynetworks: localhost