so my config for now is good?
can i send full smtp config to u? :)

29.04.2025 16:50, Quan tran hong пишет:
Hi,

You *should not use* <authorizedAddresses>0.0.0.0/0</authorizedAddresses> —
this would trust all IP addresses and could turn your server into an *open
relay*, which is a serious security risk and will get your domain
blocklisted.

Please improve your domain reputation instead, IMO.

Quan

On Tue, Apr 29, 2025 at 4:43 PM Терсков Илья Андреевич
<i.ters...@kps-t.ru.invalid> wrote:

Hi there guys :)

i checking my config and cant clearly understand one thing

<authorizedAddresses>127.0.0.0/8</authorizedAddresses> should i change
it to <authorizedAddresses>0.0.0.0/0</authorizedAddresses>
because with such config mails goint out and come in but some rare
domains cant get our mails and sometimes cant send them to me

thanks for any help
full config for 25 port

      <smtpserver enabled="true">
          <jmxName>smtpserver-global</jmxName>
          <bind>0.0.0.0:25</bind>
          <helloName autodetect="false">mail.kps-t.ru</helloName>
          <heloEnforcement>true</heloEnforcement>
          <connectionBacklog>200</connectionBacklog>
          <tls socketTLS="false" startTLS="true">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
          </tls>
          <connectiontimeout>360</connectiontimeout>
          <connectionLimit>0</connectionLimit>
          <connectionLimitPerIP>0</connectionLimitPerIP>
          <auth>
              <announce>never</announce>
              <requireSSL>false</requireSSL>
              <plainAuthEnabled>false</plainAuthEnabled>
          </auth>
<authorizedAddresses>127.0.0.0/8</authorizedAddresses>
          <verifyIdentity>false</verifyIdentity>
          <maxmessagesize>25M</maxmessagesize>
<addressBracketsEnforcement>true</addressBracketsEnforcement>
          <smtpGreeting>mail.kps-t.ru</smtpGreeting>
          <handlerchain>
              <handler
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
              <handler
class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
          </handlerchain>
      </smtpserver>

--
С уважением,
Руководитель ИТ ООО <КПС-Технологии>
Терсков Илья Андреевич
Тел.: +7 (3843) 73-14-42
Моб.: +7-996-415-16-29
e-mail: i.ters...@kps-t.ru


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
For additional commands, e-mail: server-user-h...@james.apache.org


--
С уважением,
Руководитель ИТ ООО <КПС-Технологии>
Терсков Илья Андреевич
Тел.: +7 (3843) 73-14-42
Моб.: +7-996-415-16-29
e-mail: i.ters...@kps-t.ru


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscr...@james.apache.org
For additional commands, e-mail: server-user-h...@james.apache.org

Reply via email to