On Sun, Oct 01, 2023 at 05:41:22AM +0200, Paul Menzel wrote:
> Am 30.09.23 um 22:47 schrieb Viktor Dukhovni via Postfix-users:
> > Recent news of security issues in Exim appear to in part implicate
> > libspf2.
>
> Off-topic for Postfix users, but Tobias Fiebig published the article
> *Configuring Postfix as a proxy in front of Exim MTAs* [1].
>
> [1]:
> https://doing-stupid-things.as59645.net/mail/2023/09/30/postfix-proxy-setup.html
This fails to impelement recipient verification, so prone to get clogged
with backscatter. Also TLS settings not ideal, should use explicit
set of match patterns for the hidden MX hosts, not "hostname".
Various other nits. And of course unclear whether the Exim systems
behind such a Postfix really expect to be proxies this way. They might,
for example, reject mail due to SPF policy failures...
Rearchitecting a mail flow is not a simple matter of following an
off-the-shelf HOWTO, hastily written.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
