On Sun, Jan 11, 2015 at 12:40:26AM -0300, Gonzalo Rodriguez wrote:
> I just swtich from Postfix + Dovecot to OpenSMTPd + Dovecot
> 
> And here is my conf:
> 
> table domain                            file:/etc/mail/domain
> table aliases                           db:/etc/mail/aliases.db
> 
> expire 4h
> 
> pki foobar.com certificate              "/etc/ssl/foobar.com/foobar.crt"
> pki foobar.com key                      "/etc/ssl/foobar.com/foobar.key"
> pki foobar.com dhparams                 "/etc/ssl/foobar.com/dhparam.pem"
> 
> listen on lo0 port 25
> listen on egress port 25 tls pki foobar.com auth-optional
> listen on egress port 2525 tls-require pki foobar.com auth
> listen on lo0 port 10027 tag Signed
> 
> accept for local alias <aliases> deliver to mda
> "/usr/local/libexec/dovecot/dovecot-lda -f %{sender} "
> accept from any for domain <domain> alias <aliases> deliver to mda
> "/usr/local/libexec/dovecot/dovecot-lda -f %{sender} "
> accept from any for domain <domain> deliver to mda
> "/usr/local/libexec/dovecot/dovecot-lda -f %{sender} "
> accept from local for any relay
> accept for any relay
> 

the last two rules are identical since not providing a "from" part for a
rule really means "from local"

I don't really understand the need for port 2525, nor do I see the rule
which causes your mail to be sent to a "signer".

Here's a sample from my own config:

listen on lo0
listen on lo0 port 10028 tag DKIM
listen on egress secure pki mx1.poolp.org hostname mx1.poolp.org
listen on egress port submission tls pki mail.poolp.org auth hostname 
mail.poolp.org

[...]

accept for local alias <aliases> deliver to maildir
accept from any for domain <pdomains> alias <aliases> deliver to maildir

accept tagged DKIM for any relay source <sources> hostnames <helonames>
accept for any relay via smtp://127.0.0.1:10027 # dkim-proxy


-- 
Gilles Chehade

https://www.poolp.org                                          @poolpOrg

-- 
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to