Hi,

You *should not use* <authorizedAddresses>0.0.0.0/0</authorizedAddresses> —
this would trust all IP addresses and could turn your server into an *open
relay*, which is a serious security risk and will get your domain
blocklisted.

Please improve your domain reputation instead, IMO.

Quan

On Tue, Apr 29, 2025 at 4:43 PM Терсков Илья Андреевич
<i.ters...@kps-t.ru.invalid> wrote:

> Hi there guys :)
>
> i checking my config and cant clearly understand one thing
>
> <authorizedAddresses>127.0.0.0/8</authorizedAddresses> should i change
> it to <authorizedAddresses>0.0.0.0/0</authorizedAddresses>
> because with such config mails goint out and come in but some rare
> domains cant get our mails and sometimes cant send them to me
>
> thanks for any help
> full config for 25 port
>
>      <smtpserver enabled="true">
>          <jmxName>smtpserver-global</jmxName>
>          <bind>0.0.0.0:25</bind>
>          <helloName autodetect="false">mail.kps-t.ru</helloName>
>          <heloEnforcement>true</heloEnforcement>
>          <connectionBacklog>200</connectionBacklog>
>          <tls socketTLS="false" startTLS="true">
> <privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
> <certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
>          </tls>
>          <connectiontimeout>360</connectiontimeout>
>          <connectionLimit>0</connectionLimit>
>          <connectionLimitPerIP>0</connectionLimitPerIP>
>          <auth>
>              <announce>never</announce>
>              <requireSSL>false</requireSSL>
>              <plainAuthEnabled>false</plainAuthEnabled>
>          </auth>
> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>          <verifyIdentity>false</verifyIdentity>
>          <maxmessagesize>25M</maxmessagesize>
> <addressBracketsEnforcement>true</addressBracketsEnforcement>
>          <smtpGreeting>mail.kps-t.ru</smtpGreeting>
>          <handlerchain>
>              <handler
> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>              <handler
> class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>          </handlerchain>
>      </smtpserver>
>
> --
> С уважением,
> Руководитель ИТ ООО <КПС-Технологии>
> Терсков Илья Андреевич
> Тел.: +7 (3843) 73-14-42
> Моб.: +7-996-415-16-29
> e-mail: i.ters...@kps-t.ru
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
> For additional commands, e-mail: server-user-h...@james.apache.org
>
>

Reply via email to