This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| computing:mailserver-trixie [2025/05/31 18:39] – oemb1905 | computing:mailserver-trixie [2025/10/25 19:13] (current) – oemb1905 | ||
|---|---|---|---|
| Line 28: | Line 28: | ||
| sudo nano / | sudo nano / | ||
| #new format for cert and key, longer name, removes the classic “<” character | #new format for cert and key, longer name, removes the classic “<” character | ||
| - | ssl_server_cert_file = / | + | ssl_server_cert_file = / |
| - | ssl_server_key_file = / | + | ssl_server_key_file = / |
| + | # | ||
| #comment out diffy helman, now deprecated | #comment out diffy helman, now deprecated | ||
| # | # | ||
| Line 53: | Line 54: | ||
| # quota = file:/ | # quota = file:/ | ||
| #} | #} | ||
| + | |||
| + | In May 2025, the Validity RBL switched to a locked model, so you need to disable queries to it in spamassassin by editing '' | ||
| + | |||
| + | dns_query_restriction deny bl.score.senderscore.com | ||
| + | dns_query_restriction deny sa-accredit.habeas.com | ||
| + | dns_query_restriction deny sa-trusted.bondedsender.org | ||
| + | #score RCVD_IN_VALIDITY_RPBL | ||
| Over the weeks and months ahead, I will merge the changes documented above into the body of the tutorial below. It will be some months before I merge, however, since Trixie is not yet stable and there will likely be more changes on the server I am testing in production. Below, please find the Bookworm tutorial: | Over the weeks and months ahead, I will merge the changes documented above into the body of the tutorial below. It will be some months before I merge, however, since Trixie is not yet stable and there will likely be more changes on the server I am testing in production. Below, please find the Bookworm tutorial: | ||
| + | |||
| + | -- -- Original -- -- | ||
| This tutorial assumes you know how to set up A, AAAA, SPF, DKIM, DMARC, MX, and PTR records. Set an A record for example.org and mail.example.org and make sure you or your ISP has set a PTR record to mail.example.org for the IPv4 and IPv6 addresses. If you don't know how, then learn up, and do not proceed. //Thanks to LinuxBabe for a great jumping off point//. Let's begin by editing our hosts file '' | This tutorial assumes you know how to set up A, AAAA, SPF, DKIM, DMARC, MX, and PTR records. Set an A record for example.org and mail.example.org and make sure you or your ISP has set a PTR record to mail.example.org for the IPv4 and IPv6 addresses. If you don't know how, then learn up, and do not proceed. //Thanks to LinuxBabe for a great jumping off point//. Let's begin by editing our hosts file '' | ||
| Line 618: | Line 628: | ||
| These tools prove helpful if/when emails get stuck, etc. | These tools prove helpful if/when emails get stuck, etc. | ||
| - | --- // | + | --- // |