computing:mailserver-trixie
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| computing:mailserver-trixie [2026/05/31 04:46] – oemb1905 | computing:mailserver-trixie [2026/07/28 19:52] (current) – oemb1905 | ||
|---|---|---|---|
| Line 11: | Line 11: | ||
| ------------------------------------------- | ------------------------------------------- | ||
| - | * [[https://nextcloud.haacksnetworking.org/ | + | * [[https://cloud.haacksnetworking.org/ |
| - | * [[https:// | + | * [[https:// |
| * [[https:// | * [[https:// | ||
| Line 287: | Line 287: | ||
| </ | </ | ||
| - | Similarly, for large IMAP folders, you also want to adjust IMAP's logic to provide 256k (vs. 64k) to each single IMAP command. Additionally, | + | Similarly, for large IMAP folders, you also want to adjust IMAP's logic to provide 256k (vs. 64k) to each single IMAP command. Additionally, |
| < | < | ||
| Line 334: | Line 334: | ||
| #spf incoming policy and recipient restrictions\ | #spf incoming policy and recipient restrictions\ | ||
| policyd-spf_time_limit = 3600\ | policyd-spf_time_limit = 3600\ | ||
| - | smtpd_recipient_restrictions = permit_mynetworks, | + | smtpd_recipient_restrictions = |
| + | | ||
| + | | ||
| + | | ||
| + | reject_non_fqdn_recipient, | ||
| + | reject_unknown_recipient_domain, | ||
| + | | ||
| </ | </ | ||
| Line 353: | Line 359: | ||
| reject_unauthenticated_sender_login_mismatch, | reject_unauthenticated_sender_login_mismatch, | ||
| reject_sender_login_mismatch, | reject_sender_login_mismatch, | ||
| + | check_sender_access hash:/ | ||
| permit | permit | ||
| </ | </ | ||
| + | |||
| + | The sender_access file is super helpful for repeat offenders. Sure, you can also just blacklist those in sieve rules, but that means that they still arrive and fill up your Junk folder. In some cases, spammers will send 100s of the same message per day. In those cases, it is helpful to stop them at the gates with postfix' | ||
| + | |||
| + | nano / | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | sudo postmap / | ||
| + | sudo postfix reload | ||
| + | sudo systemctl restart postfix | ||
| Now that the SPF/ | Now that the SPF/ | ||
| Line 714: | Line 731: | ||
| } | } | ||
| # rule: | # rule: | ||
| - | if anyof (header :contains | + | if anyof (header :matches |
| { | { | ||
| fileinto " | fileinto " | ||
| Line 1042: | Line 1059: | ||
| -- -- -- -- Miscellaneous Issues -- -- -- -- | -- -- -- -- Miscellaneous Issues -- -- -- -- | ||
| - | To test sieve logic and rules, download email (.eml) from Roundcube that did not behave as planned. Once you have the email, '' | + | To test sieve' |
| + | su - username | ||
| cd ~/sieve | cd ~/sieve | ||
| - | sieve-test -D -e roundcube.sieve Amazon3.eml | + | |
| + | # this ^^ gives you the headers / spamassassin scores in stdout | ||
| + | | ||
| + | # this ^^ tests your sieve logic to see if the email goes in ham or spam | ||
| - | In the output that follows, look for something like this: | + | In the output that follows, look for something like the below. I put example output for each command above, respectively: |
| + | |||
| + | < | ||
| + | Content analysis details: | ||
| + | |||
| + | pts rule name description | ||
| + | ---- ---------------------- -------------------------------------------------- | ||
| + | 0.8 DKIM_ADSP_ALL | ||
| + | 0.0 SPF_HELO_NONE | ||
| + | -0.0 SPF_PASS | ||
| + | 0.2 BAYES_999 | ||
| + | [score: 1.0000] | ||
| + | 3.5 BAYES_99 | ||
| + | [score: 1.0000] | ||
| + | 2.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail | ||
| + | domains are different | ||
| + | 2.1 HTML_IMAGE_ONLY_12 | ||
| + | 0.0 HTML_EXTRA_CLOSE | ||
| + | 0.1 MIME_HTML_ONLY | ||
| + | 0.0 HTML_MESSAGE | ||
| + | 2.0 RDNS_DYNAMIC | ||
| + | dynamic-looking rDNS | ||
| + | 0.0 HTML_SHORT_LINK_IMG_2 | ||
| + | 3.6 HTML_TAG_BALANCE_CENTER Malformatted HTML | ||
| + | 0.4 HTML_MIME_NO_HTML_TAG | ||
| + | 1.0 GOOG_STO_IMG_HTML | ||
| + | URIBL | ||
| + | 1.2 DMARC_QUAR | ||
| + | 0.0 T_REMOTE_IMAGE | ||
| + | </ | ||
| < | < | ||
| Line 1069: | Line 1119: | ||
| I rewrote the mail server tutorial for the presentation [[https:// | I rewrote the mail server tutorial for the presentation [[https:// | ||
| - | --- // | + | --- // |
computing/mailserver-trixie.1780202798.txt.gz · Last modified: by oemb1905
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
