Amitai Schleier

@schmonz@schmonz.com

Force multiplier.
Outcome improver.
Decision sharer.
Developer, leader, coach.
https://agilein3minut.es podcaster.
Musician.
Bad poet (award-winning).
JoinedApr 05, 2017 (@octodon.social)
SelfHostedMar 30, 2025
Pronounshe/they
Podcasthttps://agilein3minut.es
Consultancyhttps://latentagility.com
Morehttps://schmonz.com
Keyoxideaspe:keyoxide.org:PAC6KHICU3QSHQZVPJCZFS7KIA
1 ★ 0 ↺

[?]Amitai Schleier »
@schmonz@schmonz.com

Running via qmail-run from ? Cool. Add signing like so, then publish a TXT record with your default policy. Done!

# mkdir -p control/domainkeys/dom.ain

Alt...# mkdir -p control/domainkeys/dom.ain

    ...
    1 ★ 1 ↺

    [?]Amitai Schleier »
    @schmonz@schmonz.com

    Another from trick:

    To enable , simply uncomment "greylisting-spp-wrapper" in control/smtpplugins. That’s it.

    (Add any exempt recipient addresses to control/greylist/exemptrcpts, or entire recipient domains to control/greylist/exemptrcpthosts.)

      ...
      0 ★ 0 ↺

      [?]Amitai Schleier »
      @schmonz@schmonz.com

      Another neat trick with from :

      The default SMTP configuration rejects nonexistent recipients.

      (qmail famously accepts all recipients for its domains even when those recipients don't exist, and then has to queue totally avoidable bounce messages. But you won't.)

        ...
        0 ★ 0 ↺

        [?]Amitai Schleier »
        @schmonz@schmonz.com

        For our next trick with from :

        Want to SMTP-reject SPF failures when the source domain specifies explicit-fail?

        1. Add SPP_SPF_RESULT_FAIL="E550 spf_smtp_msg" to
        control/tcprules/smtp
        2. Run "/etc/rc.d/qmailsmtpd cdb"
        3. There is no 3rd thing, is that clear?

          ...
          0 ★ 0 ↺

          [?]Amitai Schleier »
          @schmonz@schmonz.com

          #qmail lacks #TLS. #notqmail doesn't include it either (yet!). But if you install from #pkgsrc…

          \# chown qmaild:nofiles control/servercert.pem
          \# chmod 640 control/servercert.pem
          \# ln -s control/servercert.pem control/clientcert.pem
          \# update_tmprsadh
          \# /etc/rc.d/qmail restart

          🔐

            ...
            0 ★ 0 ↺

            [?]Amitai Schleier »
            @schmonz@schmonz.com

            with via :

            echo srs.dom.ain > control/srs_domain
            echo "$SECRET" > control/srs_secrets
            echo srs.dom.ain >> control/rcpthosts
            echo srs.dom.ain:srs >> control/virtualdomains
            echo "| srsfilter" > alias/.qmail-srs-default

            + MX for srs.dom.ain

              History