~guidocella/personal-email-server-guide

2840dc73f6c33b66b68583f4690f2b3b58a4bf25 — Guido Cella 1 year, 10 months ago a938b3e
rename filters
1 files changed, 3 insertions(+), 3 deletions(-)

M smtpd.conf
M smtpd.conf => smtpd.conf +3 -3
@@ 6,10 6,10 @@ pki server_hostname.com key  "/etc/letsencrypt/live/server_hostname.com/privkey.

# Reject emails from IP addresses without a domain associated.
# This blocks most spam without blocking legitimate emails.
filter   "rdns" phase connect match   !rdns disconnect "550 no rDNS"
filter check-rdns phase connect match !rdns disconnect "550 no rDNS"
# Reject emails from IP addresses that don't match the IP address of their
# associated domain (forward-confirmed reverse DNS). This is less useful.
filter "fcrdns" phase connect match !fcrdns disconnect "550 no FCrDNS"
filter check-fcrdns phase connect match !fcrdns disconnect "550 no FCrDNS"
# Do DKIM signing with rspamd.
filter rspamd proc-exec filter-rspamd



@@ 20,7 20,7 @@ filter rspamd proc-exec filter-rspamd
# but it makes OpenSMTPD error after starting on Debian and Ubuntu
# (https://bugs.launchpad.net/ubuntu/+source/opensmtpd/+bug/1542684).
# I guess it only works on OpenBSD.
listen on ens3 tls pki server_hostname.com filter { "rdns", "fcrdns" }
listen on ens3 tls pki server_hostname.com filter { check-rdns, check-fcrdns }

# Since we have SSH access, we don't even need to setup SMTP credentials;
# we can use a script that SSHs into our email server