Re: plain text authentication

2020-05-11 Thread Thomas Bohl

Hi,

I need to use plain text authentication. I have to migrate an old 
postfix server that uses this authentication mode. I have a lot of 
devices configured in this way. I have to plan the migration to TLS, 
while I want to use OpenSMTPD with plain text authentication. It's possible?


It's not possible to use plain text authentication with OpenSMTPD.
https://www.mail-archive.com/misc@opensmtpd.org/msg04397.html

I guess your migration plan has to give OpenSMTPD a different hostname 
or port and let postfix run till ever device is moved to a TLS config.




Re: New Server, looking for some general advice

2020-05-11 Thread Antonino Sidoti
Hello,

I am using OpenSMTPD with the following;
Maildir
Dovecot/LMTP
Spamd
Dkimproxy
Dmarc (Domain)
SPF
Let’s Encrypt Certificates
Simple script for Spamd to obtain RBL lists
Filters for fcrDNS
Mutt Client
Virtual Users and Local user
Backup Mail server using Dovecot replication (Located in another country)
Dovecot Sieve for placing mail into particular folders
Rain loop WebMail client (running on another OpenBSD box)
Basic Monitoring using Monit

I am not using any backend Database.

The mail system I have configured is for me and a single domain at present. I 
don’t have any intention of scaling it out as I wanted to get off Office 365 as 
my primary aim. I like the control and being able to manage it, learnt a lot 
along the way.

Not sure if I gave you any answers but the information is out there and it 
takes time to get it right and obviously to meet your needs. The information in 
man is also very good as you know.

All my OpenBSD boxes are running at Vultr in two locations.

Good luck with your project, Happy to provide more information but better if we 
do that offline.

Nino


> On 11 May 2020, at 4:55 am, Chris Bennett  
> wrote:
> 
> Hi,
> I just added a new /27 server. So I haven't started anything except
> local for right now. It's using amd64 -current.
> I'm using A records for domain and mail.domain. No problem there.
> 
> It has one mail. address assigned right now. Different than domain IP.
> 
> What I want to achieve:
> 1. Use Maildir
> 
> 2. Use dkimproxy. I will add more domains after getting one setup right.
> 
> 3. Retrieve mail both locally and remotely. I am using neomutt over SSH
> right now, but I'm just not getting the conf file exactly right. Perhaps
> using IMAP address instead of the local directories would work better?
> Right now it recognizes mailboxes only partially correctly.
> This question might be better to ask on neomutt mailing list?
> 
> I'm guessing that dovecot will be best for remotely and locally. I
> previously used it for mbox quite a while ago over POP3.
> 
> 4. Use both local and virtual users. So I would like to prepare for the
> virtual users part at the start if possible. One step at a time is fine.
> 
> As far as DKIM, should I add the signature to the domain or mail.domain?
> I have already successfully added to mail.domain elsewhere, but is that
> right? dkimproxy man pages suggest just domain part
> 
> 5. Should I use lmtp?
> 6. Should I start with files first and move over to postgresql or
> straight to postgresql?
> 
> I have infinite (almost :-}) patience on this server since not a single
> important email will be going to it anytime soon.
> I haven't setup spamd yet and I'm unsure that I want to. It seems to
> cause me more grief than help. I'm using the opensmtpd filters elsewhere
> and they are fantastic!
> 
> I also don't have a problem reading code for answers as best as I can.
> I also have some filter code from others I need to look at (Thanks
> Edgar!)
> 
> I'm off to read the latest man pages.
> 
> Thanks so much for having such excellent software freeing me from the
> sendmail nightmare! Tons of work and I love it.
> 
> Thanks, 
> Chris Bennett
> 
> 
> 




plain text authentication

2020-05-11 Thread Adrian Ali

Hi,

I need to use plain text authentication. I have to migrate an old 
postfix server that uses this authentication mode. I have a lot of 
devices configured in this way. I have to plan the migration to TLS, 
while I want to use OpenSMTPD with plain text authentication. It's possible?


Thank you very much.