On Sat, Sep 09, 2023 at 06:24:27PM +1000, duluxoz via Postfix-users wrote:
> ***My Questions***
>
> In the mail.example.local's postfix main.cf file:
>
> 1. Should mydomin be set to example.local or one of the external facing
> domains?
The value of this parameter is used as the default suffix for non-FQDN
hostnames when "append_dot_mydomain = yes". Choose a setting that works
for you.
> 2. Should myorigin be set to example.local or one of the external
> facing domains?
The value of this parameter is used as the default domain part of
bare username email addresses. Typically, mail from cron jobs, or
users doing local submission via sendmail(1).
Along with the domain names in $mydestination, email addresses whose
domain parts are equal to this parmeter match "bare" user names in
various address rewriting tables. Choose a setting that works for you.
> 3. Have I missed anything obvious to anyone?
Test. Perhaps consider "soft_bounce = yes" as a *short-term* measure
for the first few days of deployment, and watch the logs closely.
Generally, best to avoid wildcard certificates, but you may have
plausible reasons to want them. They reduce security and tend to
create single points of failure when all the nodes in an HA setup
field the same "wrong" wildcard cert.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
