source "ssl.cnf.erb"
owner "root"
group "root"
- mode 0644
+ mode 0o644
not_if do
File.exist?("/etc/ssl/certs/exim.pem") && File.exist?("/etc/ssl/private/exim.key")
end
source "exim4.conf.erb"
owner "root"
group "Debian-exim"
- mode 0644
+ mode 0o644
variables :relay_to_domains => relay_to_domains.sort,
:relay_from_hosts => relay_from_hosts.sort
notifies :restart, "service[exim4]"
source "aliases.erb"
owner "root"
group "root"
- mode 0644
+ mode 0o644
end
remote_directory "/etc/exim4/noreply" do
source "noreply"
owner "root"
group "Debian-exim"
- mode 0755
+ mode 0o755
files_owner "root"
files_group "Debian-exim"
- files_mode 0755
+ files_mode 0o755
purge true
end
end
end
-firewall_rule "deny-outbound-smtp" do
- action :reject
- source "fw"
- dest "net"
- proto "tcp:syn"
- dest_ports "smtp"
- only_if { node[:exim][:smarthost_via] }
+if node[:exim][:smarthost_via] # ~FC023
+ firewall_rule "deny-outbound-smtp" do
+ action :reject
+ source "fw"
+ dest "net"
+ proto "tcp:syn"
+ dest_ports "smtp"
+ end
end