config_local_arch/etc/postfix, branch baDevice dependent config files for Arch Linux, managed by https://git.flylightning.xyz/fsh/tree/sh/cfg (git bare repo method)https://git.flylightning.xyz/config_local_arch/atom?h=ba2025-07-04T07:16:05Zinit xyzru VPS2025-07-04T07:16:05ZXiao Panxyz@flylightning.xyz2025-07-04T07:16:05Zurn:sha1:8ce2d46747834f1b06f2c250f0d0fa055799a767pacdiff2025-03-04T08:53:24ZXiao Panxyz@flylightning.xyz2025-03-04T08:53:24Zurn:sha1:7c6698b7d43a552acc4eece5ff3723d2561a5dfcpostfix hide client hostname and ip2025-02-28T03:03:04ZXiao Panxyz@flylightning.xyz2025-02-28T03:02:44Zurn:sha1:bf6ff7a4c133e442706ff09a91d2008b8a1ac82b
Details see `man postconf.5`. It seems smtpd_hide_client_session config
for port 25 smtp MTA this must be no, port 587 and 465 (submission and
submissions) MTU can be set to yes in master.cf. Port 25 smtp MTA
receives messages from others to me. Port 587 and 465 (submission and
submissions) MTU receives messages from me to others. main.cf is configs
for all. master.cf I can set configs specifically to submission and
submissions.
Before, when others receives my email that send from my laptop, it will
leak my laptop's hostname and ip in one of its `Received` header like
`Received: from <my-hostname> (<my-domain-name> [<my-ip>]) by
mail.flylightning.xyz ...`. After set smtpd_hide_client_session to yes,
that line changed to `Received: by mail.flylightning.xyz ...`, note
there's no `from ...` that leaks my ip.
pacdiff2025-02-22T13:14:55ZXiao Panxyz@flylightning.xyz2025-02-22T13:14:55Zurn:sha1:0a729ac5155d3795666e26e2f6370bf88e61503epacdiff2024-12-12T22:12:36ZXiao Panxyz@flylightning.xyz2024-12-12T22:12:36Zurn:sha1:cf3c2c45538ccc9101f15e1099ed634844c1b129pacdiff2024-10-25T23:01:32ZXiao Panxyz@flylightning.xyz2024-10-25T23:01:32Zurn:sha1:b7f6d661dbc113c33d10f59e77693cf7e5184df0fix: postfix smtpd_use_tls will be deprecated, so remvoe2024-07-05T22:19:39ZXiao Pangky44px1999@gmail.com2024-07-05T22:19:39Zurn:sha1:db676b7ba8944b3dae2208f91e967d1555d7e401
postfix log warning "/etc/postfix/main.cf: support for parameter
"smtpd_use_tls" will be removed; instead, specify
"smtpd_tls_security_level"". I am already using
smtpd_tls_security_level, so I just removed smtpd_use_tls. Also see
https://github.com/LukeSmithxyz/emailwiz/issues/112
`man 5 postconf` has documentation about smtpd_tls_security_level
pacdiff2024-05-01T19:23:27ZXiao Pangky44px1999@gmail.com2024-05-01T19:23:27Zurn:sha1:934b9a5bf8c0ed347a3462ec5abb67ef30098e42pacnew2024-04-08T10:32:20ZXiao Pangky44px1999@gmail.com2024-04-08T10:32:20Zurn:sha1:a0518e8d2104e67005f93ff13a5a806e7db88a11Add email server configs2024-04-05T12:02:22ZXiao Pangky44px1999@gmail.com2024-04-05T12:02:22Zurn:sha1:416a0ca8403db1d0b841b958ad4bc5e93990af5e
References:
https://github.com/LukeSmithxyz/emailwiz
https://landchad.net/
https://wiki.archlinux.org/title/Postfix
https://wiki.archlinux.org/title/Dovecot
https://wiki.archlinux.org/title/OpenDKIM
https://wiki.archlinux.org/title/OpenDMARC
Maybe useful:
https://doc.dovecot.org/settings/core/#dovecot-core-settings
https://workaround.org
https://kyun.host/docs/guides/email
`man postconf.5`
More necessary commands notes see arch_install.md