update..

roles/common/files/mailserver/etc/postfix/postfwd.bl-hosts

@@ -44,3 +44,16 @@ dia-two-2\.de$
 surlumice\.store$
 hecnvoipl\.xyz$
 viastarco\.xyz$
+mail\.notistall\.balashov\.su$
+mail\.batistase\.hz\.cz$
+mail\.lorinsales\.de\.fr$
+mail\.jostalles\.azerbaijan\.su$
+mail\.batistase\.hz\.cz$
+wulprobot\.xyz$
+circuitlogix\.com$
+anelpones\.xyz$
+a27-10\.smtp-out.us-west-2\.amazonses\.com$
+relay01\.cne\.gob\.ve$
+mta01\.cne\.gob\.ve$
+news1\.worldnews\.hair$
+ritechager\.info$

roles/common/files/mailserver/etc/postfix/postfwd.bl-nets

@@ -70,3 +70,31 @@
 217.199.96.0/19
 # viastarco.xyz (eur-versand.com)
 163.123.180.214
+# RU (u.a lorinsales.de.fr) 
+185.31.160.0/22
+# RU (batistase.hz.cz)
+93.189.42.0/23
+# RU (notistall.balashov.su)
+77.87.212.0/24
+# RU (jostalles.azerbaijan.su)
+62.173.128.0/19
+# RU ( u.a. batistase.hz.cz )
+62.76.184.0/21
+# US (u.a. premiumofen.com)
+172.93.96.0/20
+# US (u.a. premiumofen.com)
+108.171.192.0/19
+# US ()
+54.240.0.0/18
+# VE ( u.a. cne.gob.ve)
+201.130.82.0/23
+# mx1.privateemail.com mx2.privateemail.com
+198.54.122.250
+198.54.122.240
+# US (u.a. direktpaket.com>)
+198.54.112.0/20
+# classic-british-motorcycles.com
+172.67.189.127
+104.21.33.94
+# (u.a. direktpaket.com)
+194.116.228.0/24

roles/common/files/mailserver/etc/postfix/postfwd.bl-sender

@@ -69,6 +69,10 @@ firmen-infos\.com$
 @podiumskate\.\S+$
 @ppe-healthcare-europe\.\S+$
 
+@direktpaket\.com$
+@revzilla\.com$
+@christopherhinz\.com$
+
 
 # annoying spammer addresses
 ^error@mailfrom\.com$

roles/common/tasks/redis-server.yml

@@ -91,7 +91,7 @@
   when:
     - redis_conf_exists.stat.exists == False
   tags:
-    - samba-server
+    - redis-server
 
 - name: (redis-server.yml) adjust configuration '/etc/redis/redis.conf'
   lineinfile:

roles/common/templates/etc/samba/smb.conf.j2

@@ -67,7 +67,7 @@
 # This can be either the interface name or an IP address/netmask;
 # interface names are normally preferred
 ;   interfaces = 127.0.0.0/8 eth0
-   interfaces =  {{ ansible_default_ipv4.address }}/24  127.0.0.1/8
+   interfaces =  {{ samba_server_ip }}/{{ samba_server_cidr_prefix }}  127.0.0.1/8
 
 # Option 'hosts deny' and 'hosts allow' added to debian's default smb.conf 
    hosts deny = 0.0.0.0/0

roles/common/templates/etc/ssh/sshd_config.j2

@@ -466,4 +466,36 @@ Match group sftp_users
   ChrootDirectory %h
   ForceCommand internal-sftp
 
+Match all
+
 {% endif -%}
+
+{% if (sshd_pasword_auth_user is defined) and sshd_pasword_auth_user %}
+
+#-----------------------------
+# Match User for PasswordAuthentication
+#-----------------------------
+{% for item in sshd_pasword_auth_user %}
+
+Match User {{ item }}
+  PasswordAuthentication yes
+
+Match all
+
+{% endfor %}
+{% endif %}
+
+{% if (sshd_pasword_auth_ip is defined) and sshd_pasword_auth_ip %}
+
+#-----------------------------
+# Match IP Address for PasswordAuthentication
+#-----------------------------
+{% for item in sshd_pasword_auth_ip %}
+
+Match Address {{ item }}
+  PasswordAuthentication yes
+
+Match all
+
+{% endfor %}
+{% endif %}