This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
computing:mailserver [2025/04/20 18:19] – oemb1905 | computing:mailserver [2025/04/23 20:55] (current) – oemb1905 | ||
---|---|---|---|
Line 25: | Line 25: | ||
sudo ufw allow 587/tcp | sudo ufw allow 587/tcp | ||
sudo ufw allow 143/tcp | sudo ufw allow 143/tcp | ||
+ | sudo ufw allow 465/tcp | ||
sudo ufw allow 993/tcp | sudo ufw allow 993/tcp | ||
sudo ufw allow 80 | sudo ufw allow 80 | ||
Line 124: | Line 125: | ||
< | < | ||
- | Let's make sure dovecot is part of the mail group with '' | + | Let's make sure dovecot is part of the mail group, including any users you intend to use email: |
+ | |||
+ | | ||
+ | sudo adduser username mail | ||
+ | |||
+ | Now we can configure dovecot | ||
service lmtp { | service lmtp { | ||
Line 252: | Line 258: | ||
RejectFailures true | RejectFailures true | ||
IgnoreAuthenticatedClients true | IgnoreAuthenticatedClients true | ||
+ | RequireHeaders true | ||
SPFSelfValidate true | SPFSelfValidate true | ||
Socket local:/ | Socket local:/ | ||
Line 362: | Line 369: | ||
# | # | ||
report_safe 0 | report_safe 0 | ||
- | | + | add_header all Spam-Flag _YESNO_ |
- | #add_header all Flag _YESNO_ | + | |
- | | + | add_header all Report _REPORT_ |
- | | + | add_header all Level _STARS_ |
- | #add_header all Level _STARS_ | + | |
- | #add_header all Checker-Version " | + | add_header all Checker-Version " |
+ | # | ||
+ | # | ||
I included some header options, which can help with debugging. Also, I disable safe reporting and Subject rewriting because they alter the original email, which I think is overkill. In order to activate all that spam assassin can do, we need to have our own recursive DNS resolver, required by RBL services. Let's use the DNS server unbound and install it as follows '' | I included some header options, which can help with debugging. Also, I disable safe reporting and Subject rewriting because they alter the original email, which I think is overkill. In order to activate all that spam assassin can do, we need to have our own recursive DNS resolver, required by RBL services. Let's use the DNS server unbound and install it as follows '' | ||
Line 497: | Line 506: | ||
These tools prove helpful if/when emails get stuck, etc. | These tools prove helpful if/when emails get stuck, etc. | ||
- | --- // | + | --- // |