Majic Projects
Majic Ansible Roles
Go to the previous open issue
Go to the previous issue (open or closed)
star_faded.png
Please log in to bookmark issues
icon_project.png Majic Ansible Roles / Closed Feature request MAR-105 Ability to disable opening SMTP port to SMTP relay in mail_forwarder role
action_vote_minus_faded.png
0
Votes
action_vote_plus_faded.png
Go to the next issue (open or closed)
Go to the next open issue
There are no more issues in that direction.
This issue has been closed with status "Closed" and resolution "RESOLVED".
Issue basics
  • Type of issue
    Feature request
  • Category
    Not determined
  • Targetted for
    1.7.0
  • Status
    Closed
  • Progress
  • Priority
    Not determined
User pain
  • Type of bug
    Not triaged
  • Likelihood
    Not triaged
  • Effect
    Not triaged
Affected by this issue (0)
There are no items
People involved
Times and dates
  • Posted at
  • Last updated
  • Estimated time
    3 hours
  • Time spent
    2 hours
    Click here to see time logged against this issue
Issue details
  • Resolution
    RESOLVED
Attachments (0)
There is nothing attached to this issue
Duplicate issues (0)
This issue does not have any duplicates
Description

Current implementation of mail_forwarder role provides ability for SMTP relay host to connect to local SMTP server, allowing delivery of bounced messages to local accounts.

This scenario works pretty well in case of servers or workstations with static IPs, but does not make much sense for machines which are behind NAT, or machines that often change the IP (such as laptops). In particular:

  • Anything behind NAT will normally not be accessible for SMTP delivery anyway.
  • Since firewall is configured using hostname, in case a temporary offline machine (laptop) is booted, and network is not available at a time when firewall is coming up, firewall will fail to deploy completely if the SMTP relay host name cannot be resolved.

It would be beneficial if it were possible to explicitly disable opening-up the firewall for external SMTP connections.

The following should be done:

  • Implement tests for new functionality.
  • Add parameter smtp_from_relay_allowed to mail_forwarder role, defaulting the value to yes.
  • Parameter should control whether the incoming connections (via firewall) will be allowed from the SMTP relay or not.
  • Update role reference documentation.
  • Update usage instructions.
Todos (0 / 0)
There are no comments