Re: Spam, SPF check and SRS?

2018-11-14 Thread Edgar Pettijohn

On Nov 14, 2018 1:28 PM, Henry Jensen  wrote:
>
> Hi,
>
> new OpenSMTPD user here. I did (and still do) administrate Debian with Exim for several years and wanted to try something different. 
>
> So I got myself a server with OpenBSD and OpenSMTPD.
>
> So far I am impressed that a fully functional and secure SMTP server can be configured with such a small config file:) Congrats to the devs.
>
> Now that basic functionality is accomplished I want to try more. Of course I found config snippets here and there, but I think some parts of the puzzle are still missing and I still can't see the whole picture. Additionally most of the examples online are in the old syntax format.
>
> 1. Spam checking: I know there are solutions which do include spamd, Spamassasin and pf. Whats the best practice and what about rspamd?
>
Once the filtering code gets committed I think we will have endless possibilities for spam checking.
> 2. SPF checking: I think, this should also be done by the spam filter?
>
See above.
> 3. Sender Rewriting Scheme (SRS): SPF is breaking mail forwarding in some cases, and the solution to this is SRS. How can this be done with OpenSMTPD?
>
I don't know. :(
Edgar
> Kind regards,
>
> Henry
>
>
>



Spam, SPF check and SRS?

2018-11-14 Thread Henry Jensen
Hi,

new OpenSMTPD user here. I did (and still do) administrate Debian with Exim for 
several years and wanted to try something different. 

So I got myself a server with OpenBSD and OpenSMTPD.

So far I am impressed that a fully functional and secure SMTP server can be 
configured with such a small config file:) Congrats to the devs.

Now that basic functionality is accomplished I want to try more. Of course I 
found config snippets here and there, but I think some parts of the puzzle are 
still missing and I still can't see the whole picture. Additionally most of the 
examples online are in the old syntax format.

1. Spam checking: I know there are solutions which do include spamd, 
Spamassasin and pf. Whats the best practice and what about rspamd?

2. SPF checking: I think, this should also be done by the spam filter?

3. Sender Rewriting Scheme (SRS): SPF is breaking mail forwarding in some 
cases, and the solution to this  is SRS. How can this be done with OpenSMTPD?

Kind regards,

Henry





Re: OpenSMTP as mx backup

2018-11-14 Thread Lars Bonnesen
I managed to figure it out. Seems quite simple. What does the trick is:

action "disney" relay backup mx mxbackup.donald.duck
> match from any for domain "donald.duck" action "disney"


When the primare mx are down, I can see mails being queued up with:

smtpctl show queue

and mail shows up ending with:

|pending|417|Network error on destination MXs


For how long will they stay in the queue by default and how do I change
this to say... 90 days?

Regards, Lars.


On Tue, Nov 13, 2018 at 3:01 PM Lars Bonnesen 
wrote:

> Anyone can post a working smtpd.conf for OpenSMTP on OpenBSD 6.4?
>
> Lets say I want OpenSMTP to backup for the domain "donald.duck" with a
> primary mail server as "mail.donald.duck"
>
> Regards, Lars.
>