From owner-freebsd-questions@freebsd.org Mon Aug 8 07:48:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6597DBB25AF for ; Mon, 8 Aug 2016 07:48:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0FB8B1310 for ; Mon, 8 Aug 2016 07:48:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 5D82FC4C5 for ; Mon, 8 Aug 2016 07:48:09 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/5D82FC4C5; dkim=none; dkim-atps=neutral Subject: Re: Need advice for setting up mail server To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> From: Matthew Seaman Message-ID: <0d47e714-53d0-24ab-2950-abb39a55a737@FreeBSD.org> Date: Mon, 8 Aug 2016 08:47:58 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <20160807180149.GC12411@len-t420.klaas> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 07:48:15 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N Content-Type: multipart/mixed; boundary="UTI18fhC7D3dxRqjBwIsgN3OOQVtveVx5" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <0d47e714-53d0-24ab-2950-abb39a55a737@FreeBSD.org> Subject: Re: Need advice for setting up mail server References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> In-Reply-To: <20160807180149.GC12411@len-t420.klaas> --UTI18fhC7D3dxRqjBwIsgN3OOQVtveVx5 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 07/08/2016 19:01, Niklaas Baudet von Gersdorff wrote: > Sol=E8ne Rapenne [2016-08-07 19:16 +0200] : >=20 >> > Hello, you will need a SMTP server like Postfix or OpenSMTPD. >> > You will also need to care with DKIM signing and SPF in your >> > DNS. By running your own mail server you may also have problems >> > to send mails to big companies like gmail, hotmail, yahoo >> > etc... because they tend to blacklist large range of IP and >> > it's hard to get removed on this list. > At this stage I neither have SPF nor DKIM implemented on one of > my machines (this one I am actually sending you the mail from) > and so far I had no problems sending mails to "bigger companies". > I realised that Google started automatically guessing SPF and it > works for my mail server at least. :-) Spam classification systems by big mail handling sites are all different. However they are largely based on on-line reputation systems. These depend critically on the volume of e-mail sent. For the small volumes you'ld send via a personal or family server, basically you're assumed to be good unless you do anything to disabuse that assumption. Note that you also need take care of where -- IP-wise -- you're sending from. Most residential ISP netblocks are marked as such in DNSRBLs, and your terms of service will probably forbid you from running your own servers. Mail originating from those address blocks is generally assumed to be the result of spam-bots running on badly secured and compromised home systems. Avoiding this is a matter of choosing your ISP carefully, or buying a VPS or similar (which generally don't suffer from automatic RBL listing.) SPF and DKIM are aids to improving deliverability -- combined with DMARC they basically offer an online registry of where email can be sent from for which domain and a protection against forgery; pretending to send a massage from a valid sender. You don't need them, but implementing such things will mean receivers are better able to trust that any message apparently from your system really is. For getting a personal system up and running, you can ignore them in the first instance and then retrofit later if you find therm necessary. Cheers, Matthew --UTI18fhC7D3dxRqjBwIsgN3OOQVtveVx5-- --Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJXqDk1XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATc3oQAKzb6eRuYeOX4uhEMU+gTe6B PgoPysR8X7wuifde4t0Ku30KOzsvBq3z7xHkWX7criGuZs/8Ef/gYe+2GdtA8wru amOdPCsNMfxzraL6vjn73vt1IEulUWWMQLhskOH6PafNgE61SGv7Msic77UBxynH 3J4+vhqQyLNcILu9jZMGwYk8FIkuCBbY5h5EuZSFf+sf+iZAt6fLY2i5VLsS8ew/ /9g5Z2Xz8DsDMmJURpVCaFdPF7ny2TrkubHyvlXvHRcmpC9CgKF0ljxVDAujza3k BlmrpAFRbAe8tPowZBAQjOJRjSZ6Lf/IzlA5JmOU0ky48pps0Q3M+AUqCfglkFpW bm+TpcWpZ+rxlRiBt2rpH+SOCz5gnj9qgiu7MLsW39BrMVIZWbSQqR8+LaFX8lWq eQCazRcmxULG2+bhgH96k3FMCn8PTcuJfkmdOhol0iMzoEDVP3YVnYJcPz40P/R3 i6AxY1gECCX0iPFt2jLjFtYzpgH8oVBup9V+9SJcq2kXV+oHndqEyqrU3gv4nHG9 m+AZSPT5SnoCWPIq+pAbbUliP1j4/Oo2lW6PWx9/i/dIV/SYIHiRZUbRJmxQcBRP 68guzRQlsrppMyEYqnm4pcrqPyG05ag1UQRHkL+7aJk56of44Y7wF0tRCt977t4/ +SUrjjY9ocmFVUXM/w1x =nx33 -----END PGP SIGNATURE----- --Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N--