On 29.10.23 16:43, Robert Inder via Postfix-users wrote:
For 10 years now I've been running a Linux (CentOS 7) server, using
Postfix to handle mail for a handful of users.
Specifically, I'm running Postfix 2.2, because that is the most recent
version yum will fetch
from the current/default set of repositories.
Some users want to use GMail, so I have used an alias (in an aliases file)
to forward their mail to their GMail account, making
person at my.domain
an alias for
same_person at gmail.com
Recently, users have told me they have discovered that mail has not reached
them because it was rejected by GMail.
The rejection mail I have seen says GMail rejected the message because the
IP address of my server did not pass
DKIM or SPF for the source of the email.
To be more precise, the message did not pass neither DKIM nor SPF check.
I have set up SPF for my domain, but I don't think that is relevant to
FORWARDING mail (is it?).
It may be. SPF uses envelope from: header and when you forward in
/etc/aliases, the original sender's envelope from: is used, you often fail
SPF check.
So I'm not sure what to do next.
Do I have to set up DKIM?
You can only set up DKIM for your own domain, since DKIM signs domain in
header "From:".
Can I do that with Postfix 2.2?
not with postfix itself.
I did SRS by using postsrs, see https://github.com/roehling/postsrsd
1. main/default postfix instance
- uses recipient_canonical_maps and recipient_canonical_classes (postsrs)
- relayhost points to separate instance for outgoing mail
2. separate postfix instances for outgoing mail
- only listens on mail from localhost
- uses sender_canonical_maps and sender_canonical_classes (postsrs)
3. hidden BCC of srs[01]+ to postmaster (me) so I find out when someone's
mail bounces back (e.g. invalid destination address).
- used on main postfix instance
This way, even forwarding using ~user/.forward will get SRS'ed.
However, any mail from foreign domains without DKIM may still get rejected.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Christian Science Programming: "Let God Debug It!".
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
