Re: domain name as accept from source

2017-09-14 Thread Lee - ecigsoutlet

Ok cheers.

Thanks to your help I've got it working with the cron job and the table.
When I get a chance I'll take a look at improving it along the lines you 
suggest.


Kind Regards
Lee
ecigsoutlet

www.ecigsoutlet.co.uk
www.facebook.com/ecigsoutlet

On 14/09/17 22:45, Thomas Bohl wrote:

opensmtpd is only relaying, and will only accept outbound from one ip,
and will only accept inbound for my domain I don't really need to
authenticate ? In fact I'm not even sure what I'd be authenticating ?

You would authenticate that you are allowed to send emails. :-) No
matter your IP address. Instead in relying on a changing IP, you could
rely on a username and password. No workaround needed.

For example:
table passwd file:/etc/mail/passwd
listen on venet0:0 port 2525 hostname picmail.***.co.uk auth 

# cat /etc/mail/passwd
usersmtpctl encrypt password

On the *.freemyip.com side you would need to add auth to the
corresponding accept/relay part.

With you current setup nothing is encrypted though.




--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: domain name as accept from source

2017-09-14 Thread Thomas Bohl
> opensmtpd is only relaying, and will only accept outbound from one ip,
> and will only accept inbound for my domain I don't really need to
> authenticate ? In fact I'm not even sure what I'd be authenticating ?

You would authenticate that you are allowed to send emails. :-) No
matter your IP address. Instead in relying on a changing IP, you could
rely on a username and password. No workaround needed.

For example:
table passwd file:/etc/mail/passwd
listen on venet0:0 port 2525 hostname picmail.***.co.uk auth 

# cat /etc/mail/passwd
usersmtpctl encrypt password

On the *.freemyip.com side you would need to add auth to the
corresponding accept/relay part.

With you current setup nothing is encrypted though.

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: domain name as accept from source

2017-09-14 Thread Lee - ecigsoutlet
Thanks I think that is what I was looking for. I did try to RTFM but 
missed that.


As for the authentication. Simplicity. When I first set this up years 
ago I struggled to get it working. This list helped me and after that I 
pretty much left it alone.
I'm as far from 'advanced' when it comes to email protocols as you could 
get. Please do not hesitate to put me right but my thinking is that as 
opensmtpd is only relaying, and will only accept outbound from one ip, 
and will only accept inbound for my domain I don't really need to 
authenticate ? In fact I'm not even sure what I'd be authenticating ?


Again please tell me why I'm mistaken if that is the case :)

Kind Regards
Lee
ecigsoutlet

www.ecigsoutlet.co.uk
www.facebook.com/ecigsoutlet

On 14/09/17 22:00, Thomas Bohl wrote:

Is there a way I can use a domain name for accept from source as I'd
rather not have to login and edit the config when my ip changes ?

You could write a script that resolves your hostname, puts the IP into a
netaddr table and calls "smtpctl update table sources". Run by cron.

Is there a reason not to use authentication?




--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: domain name as accept from source

2017-09-14 Thread Thomas Bohl
> Is there a way I can use a domain name for accept from source as I'd
> rather not have to login and edit the config when my ip changes ?

You could write a script that resolves your hostname, puts the IP into a
netaddr table and calls "smtpctl update table sources". Run by cron.

Is there a reason not to use authentication?

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



domain name as accept from source

2017-09-14 Thread Lee - ecigsoutlet

Hi

Quick bit of background. I've started using opensmtp about 5 years ago I 
think when I wanted to upgrade my servers at a data centre but they had 
changed the rules , were blocking port 25 outbound and wanted me to use 
there mail relay. I put opensmtpd on a little arm board in my house 
listening on 2525 and things worked well enough for me. Then when I 
moved house I moved opensmptpd to a vps which is where it runs now.


I am in the process of getting rid of my last server and have setup a 
mail server just for my personal email on my own domain at home but 
where I live now my home broadband blocks port 25 inbound ! The only 
reason for the background is so when i paste the smtp.conf you don't 
think what the hell is he doing. Feel free to think that any way :)

Though my home ip rarely changes it is not static and cannot be.

So I am attempting to use opensmtp as a relay both directions. Inbound 
comes in on port 25 and out to my home sever on port 250. Outbound come 
in on 2525


-

listen on venet0:0 port 2525 hostname picmail.***.co.uk
listen on venet0:0 port 25 hostname picmail..co.uk tag RLAY
listen on lo port 10028 tag DKIM

accept from any tagged RLAY for domain "lee.me.uk" relay via 
smtp://*.freemyip.com:250


accept tagged DKIM for any relay
accept from source 82.*.**.91 for any relay via smtp://127.0.0.1:10027
#accept from source *.freemyip.com for any relay via 
smtp://127.0.0.1:10027


-

Just working on the outbound part atm accept from source 82.*.**.91 works
accept from source *.freemyip.com does not  (resolves to above ip, 
my home ip)


Is there a way I can use a domain name for accept from source as I'd 
rather not have to login and edit the config when my ip changes ?

--

Kind Regards
Lee


--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org