From owner-freebsd-questions@freebsd.org Sun Feb 28 21:01:59 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 42C9654B078 for ; Sun, 28 Feb 2021 21:01:59 +0000 (UTC) (envelope-from tundra@tundraware.com) Received: from outbound4v.ore.mailhop.org (outbound4v.ore.mailhop.org [44.233.143.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4DpbRn66Zkz3CCk for ; Sun, 28 Feb 2021 21:01:57 +0000 (UTC) (envelope-from tundra@tundraware.com) ARC-Seal: i=1; a=rsa-sha256; t=1614546116; cv=none; d=outbound.mailhop.org; s=arc-outbound20181012; b=KOlJGNrVfPwsu/zUwNDSQ1bc7S4Kw44uHCUll/32xW8Itu1Gi63Ltyt5MtEMPKaAX5XmhXaniX+VT uO74JnaGWVo0Kf7OAy7CEk1DowYKusL0gmO3mVdoGZJTpfx4tvYea08PJAPJI4AHIb1if2od9L7Rpw PNtLp7JSSyXSgeU0QM5/PK/6UAOVLDln40O0GDey3VxH6+fl5Gtlys1SqEjtXvdME3WafeU1MaEQaT wkrAAuFxv0GF2uq/lVSuBeBHmTvyW0zT5PQFjLTubIwUHW7CnIDH691f27c84M/pBkE+yxC4rP6svP QKkXxOy2MpLxtMpfWaM0NHpw2BBT4Hw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=arc-outbound20181012; h=content-transfer-encoding:content-type:in-reply-to:mime-version:date: message-id:from:references:to:subject:dkim-signature:dkim-signature:from; bh=p3KVK7zDuSYwP7BZ+VSHok+gL8zCIYXHr3R/KJzIoZs=; b=qnl3yoQuNXAemrSYnyclMqB7Jr0W/Yw80Zm1M5mM23Y/1FPU9Yzg2OuTZL9vJW244or8DN9BqR3U9 ac5lGsy0WzkgFKl+1/kTNpafweaRBh4Ev9+O3AnWcTVhmW+MqiOZgCadCPBtePHIEyyygFGDci5zCw Vlu3ai3hgjuxtRLp3HJVmF7MDtTfcJjhNo3w73vhLVxn7fVyht3mNUNZecHTb/v05SPIHBpI25zdBI NRiaa96LHb5PSSuW7vGyGhLsFUzpowHYFqYEJHfDxQ8QSv+ca54jFmg82lptF1AeOKdFoYgcqduuKt Yr11VihrBH6zOHwmx36yZT7dqHMsTOg== ARC-Authentication-Results: i=1; outbound4.ore.mailhop.org; spf=pass smtp.mailfrom=tundraware.com smtp.remote-ip=45.55.60.57; dmarc=none header.from=tundraware.com; arc=none header.oldest-pass=0; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tundraware.com; s=duo-1614540450527-997c40d8; h=content-transfer-encoding:content-type:in-reply-to:mime-version:date: message-id:from:references:to:subject:from; bh=p3KVK7zDuSYwP7BZ+VSHok+gL8zCIYXHr3R/KJzIoZs=; b=V/06BWcUBFW81mv9Bp1uHxs46P0+QgOpQwo8esE3jhOve2Q6z1KfsK0+et6eVDXOXEa1d+/xgRWGm IHZ7y2Ke/U9xOM8oT8vOVTqxw5d7dVrR3PhHeSOp91mSC/KESSzyBEiN7GUY3u8ITJ8zCcUWRh2f7c 1NtDtU4id+szBx20= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=dkim-high; h=content-transfer-encoding:content-type:in-reply-to:mime-version:date: message-id:from:references:to:subject:from; bh=p3KVK7zDuSYwP7BZ+VSHok+gL8zCIYXHr3R/KJzIoZs=; b=jb2S9h+CDTYOFG6X4x1BKPl4Vey3Qy2vTwvjdSoVhkF5u7c9CaXDXjGqtnxDg6RxhVSopP63Y1Gu/ niY4ddiMbxQA04wN+CNZr0OmFaMi6NQWF19dcK1Bz2ybO9KAan5UtMiLtFLJ2d7UK5H2Bm8MBautpx W3dSQ5k6SfYy2M7cwgau2VivAA87/pH7I4iWXAGFc2eXAmiEbWrDyR78YqZ80I3FomDl2hbFFpdwyx AZO18kjfQoZdZSAltjFvBe6RcgbtTZzH+O51u8VbwfMNBxa5GUPImy5H2W6YrshOUyYw90tpGUmwC/ VP5gXAOCA0uoSze4sL+tbBC7oxsyF5Q== X-Originating-IP: 45.55.60.57 X-MHO-RoutePath: dHVuZHJhd2FyZQ== X-MHO-User: 2f651caa-7a08-11eb-ad62-59765e228ffb X-Report-Abuse-To: https://support.duocircle.com/support/solutions/articles/5000540958-duocircle-standard-smtp-abuse-information X-Mail-Handler: DuoCircle Outbound SMTP Received: from oceanview.tundraware.com (oceanview.tundraware.com [45.55.60.57]) by outbound4.ore.mailhop.org (Halon) with ESMTPSA id 2f651caa-7a08-11eb-ad62-59765e228ffb; Sun, 28 Feb 2021 21:01:54 +0000 (UTC) Received: from [192.168.0.2] (ozzie.tundraware.com [75.145.138.73]) (authenticated bits=0) by oceanview.tundraware.com (8.16.1/8.16.1) with ESMTPSA id 11SL1duR017372 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Sun, 28 Feb 2021 15:01:39 -0600 (CST) (envelope-from tundra@tundraware.com) Subject: Re: Somewhat OT: Mail Relay Services To: FreeBSD Mailing List References: <877d08ef-d533-69f6-4c44-f2cbbe39ba31@tundraware.com> <000001d70dff$23f1cdf0$6bd569d0$@gsicomp.on.ca> From: Tim Daneliuk Autocrypt: addr=tundra@tundraware.com; prefer-encrypt=mutual; keydata= xsFNBFlVgYoBEADIYD9W4mbKz5cEleX923hagDWkxyJl4kRiMJnz+dNAH71MItSdErMb0cFt CPxVncb4dR4R2ec0c0MjPcgVINNtbY1DMWsF7t31TKD8NG9ZjLqF6fZDFjgkRejqHytgjmCI UejrMSCf0UJsLtg+I3N1ZVVxd7ALj2bCvC/uc5S7j+YbNnhQvSoBbdFj/xOTjyOGGpk7WfB7 e42PGKq1NSgnI7tcY6HSaSH+LHeoc0yUpBb5A1ge+RhR1N9JTniEFe0qvOBi+HgUltEoxsk4 xb6IhpkDOTsxHvEg5h0ukfl8kG9cu+LrEBqwPaC8lPw3UmoTEAU+lXHanPE12JCF/54EtVCc rb4W0vqgGmLJzn5dRU/fWkar0FKPq4eoV0XMbGZKIC6pWQnMEsxEMpNvh7oefK6Kyn+LO+59 +sNYHbv1RImDJccmfHTOA6/jHdwOcnYy37U8UF7e+mGrwNs8GsMQx2AaQbR6VErakH3GBgft bMFOGQxiaRBkbzba7BZCQ060yhiC3/Mb/xHoVi7PBEmKig1SErTMA7Fh3CYPYIRDphNs6OSr tf9O4hbzUAsjbU3rxOfiWQjP3fSOM0KUBj4wpIWZlMrjAGnMIz2wHb211wsBiLqSaGiiO1LR 7RrcvbIFZvHQHiWe2tdRyuH3N/h7A316yoLfx+yy1gyP5weWsQARAQABzSRUaW0gRGFuZWxp dWsgPHR1bmRyYUB0dW5kcmF3YXJlLmNvbT7CwXcEEwEIACEFAllVgYoCGyMFCwkIBwIGFQgJ CgsCBBYCAwECHgECF4AACgkQdoOXo5EJFKntcA/9F9ags9Ik5C49N39iRq+yqBdn/Lr75rqv +Yg7JkjeVlwHpnQt1S6orTC7EaJc+AqY3szCEmhfuT0+E96Bw2k+G/XRnaedZ9SHSdImlmq0 RmOFpWLr67ScvlA9YG1tyR+QYraEFqK5EB6qhOWRJoz1BYtAAntK9b9gUTXt/277sT7lAWaj oPi4CDd4DofHc4E9VRsniMQNMLCWqc/ygAK07cWbK2Rh90tS2C4nK6OHFkNkK94zDilfxod1 NBFTUPPYfEU2CSa3eLlpfhYY3/2X7zNvmmCt+chHUnAhQLhldQ3WlqmTKP+ZK9LX002/bY1O M8Zk76WyA/A3EfsIUbnXBQvFyjwX6W4QEytlZWtp/yRIe64JOa3dZ8rkhragb2N4VgVLBVe3 jtZgfQ72pHrfNk/T0uT+hjFqInvIYiXkhxB2GiD7Ga28VuXojTmeoaW3GKcvoVxONSju7WzD XgyxWRmNpd5uifJcC3YU3tNNAosnQ0/5FW4wkducSEVwwqnAiSMQEMDDa/e6oP6GyOzes5SV LTNCRYdHWVKbxjetYU4SKm5RdLx9XuJo0qL9vO97mCNwdNkTM7gO2ycQ49qUiGbCZJOh2gpP ZRFrpJDxbloosAfOEB6IYjhb38u6jvbScJKK3bWA+a8TK4SrQpdRd1cAnW9sA8jCTV8ejZq0 CHnOwU0EWVWBigEQAJYuihAOOOe/kAn045Ayn+3is3S+6eV4IAgL6lJhoChkgUJJuFoRX9BY rd35z29+q2/UCoProzd4Mk66wXeWv6n4s5R79OUzjgMLCTVlVaMy4gjPL9NRDwMt7KYRF56g mnoKZwfPDi/oJ5toPPboW94FrMwonqbdqYM2Pyi/HPMe4e396WQ4TaA1CdhyzKHoFSpkGcjX zIQ5yQ5aaGS7wonRu/pg15dbu+8QOgxRNFa0bO+ntz/30u+VmxFqFVbExjuy3Or8fSBhJgx4 cfyrrunKLclpZ/52VeK3l53yWYpR8RaTZfzpu8Ih+ijAY4XLO5F8P1T6sEviMaTY2F0sbFRx ZJXsgFpiKeWPHUn7/LX7qcoFJYoFqG6b3n5km+qy39x6lMgJDuxKpeN6lYj//LB6xVzn0JI+ 4ZHPrEkFqxu8VkL7deCPTI67ZJik18jXjTH9sha1YBvgvxIPFMA7ZwXX2AwNu7PzdcCpWarS usOAHbjQBUsQ+ZPpI1oeFnsCPZ+8/mMcTjVRZyJxOPs3KnXZv2cXNuaa7lwkWS366gHzQI7O l6WdC8TyNjiOzR654cL8BgYQ/xNSW1vTXqPWSRU8/b/5IueY2tQJh0CKIvfoP0rk8976wa1R 8SRi08mwHX7+F5oSeXLRNHicQGpS1f0DywdRcQ0MFHyq/CV4dTltABEBAAHCwV8EGAEIAAkF AllVgYoCGwwACgkQdoOXo5EJFKkDNw//c8nailIVOV72l7Lze+2AuK9MYUCFb1i4qI1WTnG0 OHQlCAltPhdwZPAozJw/eNqIcuWQh8rZspve9ipj589wLSsVyaFRsuYXTiYZ9RlRsnJYa36h 2JML3ZGrRsSxaUEAggbiOKbwmw27JuOIPmC3Gln4tJuZ+nw6cfCgMI45bIzinVanxHwPLeLp BZKpaEYzAwtBykUfAXn3jDwrI95UlMJvhHDFuRgvb6uSyJIqmp5aR/BjnlSdEwICyWpRAVSt yqZeBMeHbCr1B97PIRzk/q0eHm9T+AoiZWwz1iVGGgkYdAaCfs2PBlNHmRm93cfgoEcaGvNb RbTXOe28niMJeYMQsnjOTy5AQIrhVKeP5E+qVs/oPK/inmLiTbjZcnrO2wR+uxpPGgmR6M/3 p8qyRdaOvT87HZXO+Wr+r9A4UnwhCPsfELwPlEo+TJQ/oE71Mlkx/ddQCWELcHjXrQF9YbzA Ml7g0zTkgHysh4DNkV5iYteOcmCwsWdOwn0H0yZfz6weyr8nEdPngyOjFNKMIpcTbeg8866c GxXAJj46dub4VdVwfvMRHfmmRJkjdId7YHWMgz2Kf7S7KPCROLis7WjlOdSS0q2m/7qy9WL/ ZW50YLS8ZZLMrnari5JxCyJX+8n6ZASo2AA93iTbKmYegK2LDwW1QLU1iAF3GyGOnSE= Message-ID: Date: Sun, 28 Feb 2021 15:01:34 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <000001d70dff$23f1cdf0$6bd569d0$@gsicomp.on.ca> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (oceanview.tundraware.com [45.55.60.57]); Sun, 28 Feb 2021 15:01:39 -0600 (CST) X-TundraWare-MailScanner-Information: Please contact the ISP for more information X-TundraWare-MailScanner-ID: 11SL1duR017372 X-TundraWare-MailScanner: Found to be clean X-TundraWare-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin (not cached, score=-2.901, required 6, autolearn=not spam, ALL_TRUSTED -1.00, BAYES_00 -1.90, NICE_REPLY_A -0.00) X-TundraWare-MailScanner-From: tundra@tundraware.com X-Spam-Status: No X-Rspamd-Queue-Id: 4DpbRn66Zkz3CCk X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tundraware.com header.s=duo-1614540450527-997c40d8 header.b=V/06BWcU; dkim=pass header.d=outbound.mailhop.org header.s=dkim-high header.b=jb2S9h+C; arc=pass (outbound.mailhop.org:s=arc-outbound20181012:i=1); dmarc=none; spf=pass (mx1.freebsd.org: domain of tundra@tundraware.com designates 44.233.143.45 as permitted sender) smtp.mailfrom=tundra@tundraware.com X-Spamd-Result: default: False [-4.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_XOIP(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:44.233.143.45]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[tundraware.com:+,outbound.mailhop.org:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RBL_DBL_DONT_QUERY_IPS(0.00)[44.233.143.45:from]; ASN(0.00)[asn:16509, ipnet:44.224.0.0/11, country:US]; MID_RHS_MATCH_FROM(0.00)[]; ARC_ALLOW(-1.00)[outbound.mailhop.org:s=arc-outbound20181012:i=1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[tundraware.com:s=duo-1614540450527-997c40d8,outbound.mailhop.org:s=dkim-high]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[tundraware.com]; RCPT_COUNT_ONE(0.00)[1]; SPAMHAUS_ZRD(0.00)[44.233.143.45:from:127.0.2.255]; RCVD_IN_DNSWL_NONE(0.00)[44.233.143.45:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Feb 2021 21:01:59 -0000 On 2/28/21 12:25 PM, matt@gsicomp.on.ca wrote: > Like anything to do with email, it's not entirely as simple as it sounds. > DuoCircle requires per-domain setup via their UI ("permitted senders"), plus > you need to set up SPF and DKIM keys for each domain. > This was a hard slog for 100+ domains but has been entirely worth the > initial effort and ongoing cost to avoid mail delivery complaints from > customers that are entirely beyond my control. Thanks Matt (and everynone else who had suggestions) - This seems to work just fine, as evidenced by the headers in this very email.