journalwatch: allow more TLS errors

[ansible.git] / roles / email / templates / postscreen_access.cidr

diff --git a/roles/email/templates/postscreen_access.cidr b/roles/email/templates/postscreen_access.cidr
index 162f90b31c4370bd4b728576dd6c619e3068be89..91acb4c34c180e977adb0b106deefd3be2c844ba 100644 (file)
--- a/roles/email/templates/postscreen_access.cidr
+++ b/roles/email/templates/postscreen_access.cidr
@@ -1,4 +1,23 @@
 # Google thinks they are better than everyone else, and don't need to be compatible with greylisting.
 209.85.128.0/17 permit
 # Same for Microsoft.
 # Google thinks they are better than everyone else, and don't need to be compatible with greylisting.
 209.85.128.0/17 permit
 # Same for Microsoft.

-52.96.0.0/12 permit
+40.96.0.0/13 permit
+40.104.0.0/15 permit
+52.96.0.0/14 permit
+2603:1000::/24 permit
+# And Sparkpost.
+156.70.4.0/23 permit
+156.70.2.0/23 permit
+147.253.208.0/20 permit
+
+# Some hosts that send bounces to the wrong guy (i.e., me)
+192.241.146.138 reject please check mail server config, your server is sending bounce spam
+209.97.143.86 reject please check mail server config, your server is sending bounce spam
+209.97.132.56 reject please check mail server config, your server is sending bounce spam
+188.166.20.128 reject please check mail server config, your server is sending bounce spam
+159.203.188.91 reject please check mail server config, your server is sending bounce spam
+159.203.190.197 reject please check mail server config, your server is sending bounce spam
+159.65.138.221 reject please check mail server config, your server is sending bounce spam
+128.199.206.172 reject please check mail server config, your server is sending bounce spam
+142.93.223.22 reject please check mail server config, your server is sending bounce spam
+59.106.209.178 reject please check mail server config, your server is sending bounce spam