Re: using SPF or DKIM instead of greylisting?

2014-05-31 Thread Craig R. Skinner
On 2014-05-30 Fri 11:26 AM |, Ji Navr??til wrote:
> 
> I'm using pf greylisting on OpenBSD. More and more emails from Google are 
> delayed and few are not delivered at all.
> 

Setting greyexp to 48+ hours works fine. You could set it to 4 days.

Create one of those shitmail accounts and send your server some 'test'
messages. Eventually they'll validate through greylisting.

Once low volume regular mails come through, it ceases to be a problem.


-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: Should we use DKIM and SPF?

2014-04-26 Thread Craig R. Skinner
On 2014-04-26 Sat 14:04 PM |, John Cox wrote:
> 
> Unfortunately the whole point of SPF (unlike Sender-ID which works
> much better and on much the same principles) is that you can reject
> the message before receiving it
> 

That's the idea, but it is often abused by dumb hostmasters (e.g:
google) publishing their entire address space.

Infected PCs in the sales office, employee WiFi zones, tape silos,
routers, web servers, etc... are not valid mail exchangers, so SPF
records of 'valid sending IP address' can't be trusted.

SPF might be slightly helpful, but it is not reliable.


-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: Should we use DKIM and SPF?

2014-04-19 Thread Craig R. Skinner
On 2014-04-19 Sat 08:26 AM |, Martin Braun wrote:
> 
> I was thinking about adding DKIM and SPF to my OpenSMTPD setup as I
> have previously run with those, but I am in doubt.
> 
> I am thinking about the "worth" of those technologies?
> 

OK for sending, waste of time for receiving validation.

SPF is grossly abused, and DKIM mail must be received before it can be
inspected. Useless.

See the section "SPF found potentially useful" and the 1st comment of:
http://bsdly.blogspot.co.uk/2007/07/harvesting-noise-while-its-still-fresh.html

OpenBSD's spamd + greyscanner rocks!

These helpers work with spamd for bulk trap address loading:
http://web.britvault.co.uk/products/abersnuik/
http://web.britvault.co.uk/products/spamdba/

I've vastly modified greyscanner to check DNS PTR records & DNS RBLs.
e.g: https://bitbucket.org/bonetruck/greyscanner/pull-request/5/

Nothing else is needed to filter incoming spam.


-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: Why use lda or lmtp at all?

2014-04-17 Thread Craig R. Skinner
On 2014-04-17 Thu 05:51 AM |, Martin Braun wrote:
> I have now (finally) a successful setup in which opensmtpd delivers
> mail to dovecot-lda and dovecot handles imap, but I tried to have
> opensmtpd deliver the mail directly into the maildir, and NOT to
> dovecot, and just have dovecot serve IMAP.
> 
> 
> Am I missing something?
> 

http://wiki2.dovecot.org/Pigeonhole/Sieve

" which filters incoming messages  "


-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: OpenSMTPD talking with Dovecot

2014-04-16 Thread Craig R. Skinner
On 2014-04-16 Wed 04:59 AM |, Martin Braun wrote:
> 
> I actually prefered when Dovecot had just one huge configuration file
> instead of the one gazillion files it has now.
> 

I prefer it with separate files for logical parts.

> Any ideas?
> 

http://wiki2.dovecot.org/PasswordDatabase/


#10-mail.conf:
mail_location = maildir:/var/mail/%u
namespace inbox {
  type = private
  separator = /
  inbox = yes
  # http://wiki2.dovecot.org/Namespaces
}
mmap_disable = yes
mail_plugin_dir = /usr/local/lib/dovecot



#10-auth.conf:
disable_plaintext_auth = yes
auth_username_format = %Ln
# http://www.dovecot.org/list/dovecot/2010-October/053427.html
auth_mechanisms = cram-md5
!include auth-system.conf.ext



#auth-system.conf.ext:
passdb {
  driver = passwd-file
  args = scheme=cram-md5 /etc/mail/imap-cram-md5.passwd
}
userdb {
  driver = passwd
}



-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: a bit of news

2014-04-11 Thread Craig R. Skinner
On 2014-04-11 Fri 15:52 PM |, Gilles Chehade wrote:
> 
> First of all, we're now the default MTA on OpenBSD.
> 

Congrats.

A massive effort to replace the major bits of Sendmail, Apache, BIND,...


-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: mailing list down for an hour

2013-09-05 Thread Craig R. Skinner
On 2013-09-05 Thu 15:41 PM |, f5b wrote:
> 
> mlmmj in OpenBSD ports Version is 1.2.17.1, will Gilles Chehade update it to 
> latest stable in ports or tell maintainer simon+AT+openbsd.org  to do it? 
> 

http://openbsd.7691.n7.nabble.com/update-mail-mlmmj-td227320.html


-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: mailing list manager ?

2013-08-27 Thread Craig R. Skinner
On 2013-08-27 Tue 14:46 PM |, Gilles Chehade wrote:
> 
>Two bugs the same month,
>Out of curiosity, if some of you are running mailing lists, what
>software are you using ?
>I'd like to replace the current hackish one I wrote with something that
>will just work with minor dependencies.
>I've been told about "Sympa" but I'm wondering if there are other
>minimalist ones I should look into ;-)
>Gilles


mlmmj gets my vote: http://mlmmj.org/

In OpenBSD ports/packages tree too.

I don't use any web shit, because mail & web go together like oil &
water.

Cheers,
-- 
Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd.in/yGqkv7

-- 
You received this email because you are subscribed to the "misc@opensmtpd.org" 
list
To unsubscribe, send mail with subject: [misc@opensmtpd.org] unregister