Re: FAQ Suggestions

[ED Fochler]

> On 2016, Feb 17, at 1:56 PM, Steve Conrad  wrote:
> 
> So the upshot is that it's not possible to set all mail as virtual, as can be 
> done with qmail for instance.
> 
> 
> If the service is free, you're the product.

That has been my experience.  You need to be a real computer with a mail server 
before you can do aliases.  Your real name can be a host that never gets e-mail 
except from itself though, so I have not thought about it very hard.

Conceptually you should be doing alias work for a domain, while your mail 
server does have its own, separate host name.  It’s bad form to have a host 
named “apple.com” for instance, but there’s no hard distinction between a 
hostname and a domain name.  

ED.
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org

Re: FAQ Suggestions

[Steve Conrad]

So the upshot is that it's not possible to set all mail as virtual, as can be 
done with qmail for instance.


If the service is free, you're the product.

Re: FAQ Suggestions

[Joerg Jung]

> Am 17.02.2016 um 05:12 schrieb Steve Conrad :
> 
> 
> Here's the config I used that broke local delivery. 
> Most likely I've overlooked something simple,
> 
> but it's not jumping out at me. 

There is a subtle difference between a hostname
and a domain name. So you set your mail server
hostname to a  domain name, AFAIK this is not 
expected to work. Your mail server has to have a real 
hostname  (FQDN). You may want to read up on 
FQDNs and the differences between hostnames and 
domain names.

> Simply changing my hostname to pseudonymous.splazo.co
> 
> made it all work fine.
> 
> 
> //Things look reasonably well configured in /etc/mail:
> 
> 
>  # cd /etc/mail
>  # grep frisco.splazo.co *
>  aliases:steve:  st...@frisco.splazo.co
>  Binary file aliases.db matches
>  domains:frisco.splazo.co
>  passwd:st...@frisco.splazo.co:$2b::
>  smtpd.conf:pki frisco.splazo.co certificate 
> "/etc/ssl/frisco.splazo.co.crt"
>  smtpd.conf:pki frisco.splazo.co key 
> "/etc/ssl/private/frisco.splazo.co.key"
>  smtpd.conf:listen on egress port 25 filter sub tls pkifrisco.splazo.co
>  smtpd.conf:listen on egress port 587 filter all tls-require pki 
> frisco.splazo.co auth 
>  virtuals:ab...@frisco.splazo.co st...@frisco.splazo.co
>  virtuals:postmas...@frisco.splazo.cost...@frisco.splazo.co
>  virtuals:webmas...@frisco.splazo.co st...@frisco.splazo.co
>  virtuals:st...@frisco.splazo.co   vmail
> 
> Aliases seem to be setup ok:
>  # grep -e root: aliases
>  root: steve
>  # grep -e steve: aliases
>  steve:  st...@frisco.splazo.co
> 
> 
> Here's what I'm running:
>  # hostname; uname -a; smtpd -h   
> 
> frisco.splazo.co  
>   
>  OpenBSD frisco.splazo.co 5.9 GENERIC#1743 amd64  
> 
>  version: OpenSMTPD master  
> 
> 
> Here are a couple of examples of it not working:
> 
> // have the same problem with telnet
> 
>  $ telnet localhost 25
>  Trying 127.0.0.1...
>  Connected to localhost.
>  Escape character is '^]'. 
>  220 frisco.splazo.co ESMTP OpenSMTPD
>  helo lap.top
>  250 frisco.splazo.co Hello lap.top [127.0.0.1], pleased to meet you
>  mail from: 
>  250 2.0.0: Ok
>  rcpt to: 
>  550 Invalid recipient
> 
> 
>  // and with /usr/bin/mail
>  $ mail root
>  Subject: test
> 
>  well?
>  .
>  EOT
>  $ send-mail: command failed: 550 Invalid recipient
> 
> 
> 
> 
> 
> If the service is free, you're the product.

Re: FAQ Suggestions

[Steve Conrad]

>This works for me. I can not say what is broken in your setup without seeing 
>your config.


Here's the config I used that broke local delivery. 
Most likely I've overlooked something simple,

but it's not jumping out at me. 

Simply changing my hostname to pseudonymous.splazo.co

made it all work fine.


//Things look reasonably well configured in /etc/mail:


 # cd /etc/mail
 # grep frisco.splazo.co *
 aliases:steve:  st...@frisco.splazo.co
 Binary file aliases.db matches
 domains:frisco.splazo.co
 passwd:st...@frisco.splazo.co:$2b::
 smtpd.conf:pki frisco.splazo.co certificate "/etc/ssl/frisco.splazo.co.crt"
 smtpd.conf:pki frisco.splazo.co key "/etc/ssl/private/frisco.splazo.co.key"
 smtpd.conf:listen on egress port 25 filter sub tlspkifrisco.splazo.co
 smtpd.conf:listen on egress port 587 filter all tls-require pki 
frisco.splazo.co auth 
 virtuals:ab...@frisco.splazo.co st...@frisco.splazo.co
 virtuals:postmas...@frisco.splazo.cost...@frisco.splazo.co
 virtuals:webmas...@frisco.splazo.co st...@frisco.splazo.co
 virtuals:st...@frisco.splazo.co   vmail

Aliases seem to be setup ok:
 # grep -e root: aliases
 root: steve
 # grep -e steve: aliases
 steve:  st...@frisco.splazo.co


Here's what I'm running:
 # hostname; uname -a; smtpd -h 
  
frisco.splazo.co

 OpenBSD frisco.splazo.co 5.9 GENERIC#1743 amd64
  
 version: OpenSMTPD master  


Here are a couple of examples of it not working:

    // have the same problem with telnet

 $ telnet localhost 25
 Trying 127.0.0.1...
 Connected to localhost.
 Escape character is '^]'. 
 220 frisco.splazo.co ESMTP OpenSMTPD
 helo lap.top
 250 frisco.splazo.co Hello lap.top [127.0.0.1], pleased to meet you
 mail from: 
 250 2.0.0: Ok
 rcpt to: 
 550 Invalid recipient


 // and with /usr/bin/mail
 $ mail root
 Subject: test

 well?
 .
 EOT
 $ send-mail: command failed: 550 Invalid recipient



If the service is free, you're the product.

Re: FAQ Suggestions

[Steve Conrad]

Here's the config I used that broke local delivery. 
Most likely I've overlooked something simple,

but it's not jumping out at me. 

Simply changing my hostname to pseudonymous.splazo.co

made it all work fine.


//Things look reasonably well configured in /etc/mail:


 # cd /etc/mail
 # grep frisco.splazo.co *
 aliases:steve:  st...@frisco.splazo.co
 Binary file aliases.db matches
 domains:frisco.splazo.co
 passwd:st...@frisco.splazo.co:$2b::
 smtpd.conf:pki frisco.splazo.co certificate "/etc/ssl/frisco.splazo.co.crt"
 smtpd.conf:pki frisco.splazo.co key "/etc/ssl/private/frisco.splazo.co.key"
 smtpd.conf:listen on egress port 25 filter sub tls pkifrisco.splazo.co
 smtpd.conf:listen on egress port 587 filter all tls-require pki 
frisco.splazo.co auth 
 virtuals:ab...@frisco.splazo.co st...@frisco.splazo.co
 virtuals:postmas...@frisco.splazo.cost...@frisco.splazo.co
 virtuals:webmas...@frisco.splazo.co st...@frisco.splazo.co
 virtuals:st...@frisco.splazo.co   vmail

Aliases seem to be setup ok:
 # grep -e root: aliases
 root: steve
 # grep -e steve: aliases
 steve:  st...@frisco.splazo.co


Here's what I'm running:
 # hostname; uname -a; smtpd -h 
  
frisco.splazo.co

 OpenBSD frisco.splazo.co 5.9 GENERIC#1743 amd64
  
 version: OpenSMTPD master  


Here are a couple of examples of it not working:

    // have the same problem with telnet

 $ telnet localhost 25
 Trying 127.0.0.1...
 Connected to localhost.
 Escape character is '^]'. 
 220 frisco.splazo.co ESMTP OpenSMTPD
 helo lap.top
 250 frisco.splazo.co Hello lap.top [127.0.0.1], pleased to meet you
 mail from: 
 250 2.0.0: Ok
 rcpt to: 
 550 Invalid recipient


 // and with /usr/bin/mail
 $ mail root
 Subject: test

 well?
 .
 EOT
 $ send-mail: command failed: 550 Invalid recipient





If the service is free, you're the product.

Re: FAQ Suggestions

[Joerg Jung]

> On 15 Feb 2016, at 23:44, Steve Conrad  wrote:
> 
> I noticed a couple of minor changes that might help improve the FAQ.
> 
> Setting up a virtual domain identical to the hostname will break local 
> delivery even though external messages will work fine. This means you'll no 
> longer get the daily security reports or anything else addressed to root. 
> Probably worth a mention.

This works for me. I can not say what is broken in your setup without seeing 
your config.

> For some reason, Dovecot finds the default daemon settings from 
> /etc/login.conf inadequate for its needs. I had to bump openfiles-cur from 
> 128 to 512 in order to get rid of a bunch of perplexing error messages about 
> being unable to find config files located in plain sight. No doubt Dovecot's 
> well populated conf.d directory is a contributing factor here. Still seems 
> kind of needy to me, though. Haven't bothered experimenting with a minimum 
> acceptable value.

This is mentioned in the package readme (so one see it on install):
http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/mail/dovecot/pkg/README-server?rev=1.2&content-type=text/plain
 


No need to double this info in the guide.

> Also, as a very minor point, the opensmtpd-extras-* sub packages seem to have 
> been subsumed by plain old opensmtpd-extras, so reference to them could be 
> deleted.

This is wrong. Sub-packages still exist and have always existed.

FAQ Suggestions

[Steve Conrad]

I noticed a couple of minor changes that might help improve the FAQ.

Setting up a virtual domain identical to the hostname will break local delivery 
even though external messages will work fine. This means you'll no longer get 
the daily security reports or anything else addressed to root. Probably worth a 
mention.

For some reason, Dovecot finds the default daemon settings from /etc/login.conf 
inadequate for its needs. I had to bump openfiles-cur from 128 to 512 in order 
to get rid of a bunch of perplexing error messages about being unable to find 
config files located in plain sight. No doubt Dovecot's well populated conf.d 
directory is a contributing factor here. Still seems kind of needy to me, 
though. Haven't bothered experimenting with a minimum acceptable value.

Also, as a very minor point, the opensmtpd-extras-* sub packages seem to have 
been subsumed by plain old opensmtpd-extras, so reference to them could be 
deleted.

Hope this helps.


If the service is free, you're the product.