Viktor Dukhovni wrote:
> On Wed, Sep 16, 2020 at 04:39:12PM -0600, Bob Proulx wrote:
> > What's the best configuration for a web server that does not receive
> > mail but needs to send mail?
> 
> Send via a smarthost relay.  Use a valid envelope sender domain that
> will receive (and, as appropriate, take note of) bounces.  Use a
> valid "From" domain, but perhaps a "noreply" localpart.

The system would be its own smarthost for outbound mail.  I was hoping
to avoid the need to set up an incoming mail server for this project.
But so far yours and the other response were that if one wants mail to
be accepted at other sites then the sending domain must publish MX
records.

Even though I know in your other message to the immediately following
thread that you wrote that it should not be required by the RFCs.  And
I agree with that.  But here the opposite is said, sounding as if from
a practical standpoint regardless of the RFCs.

> For the header RFC2822.From localpart, you have a choice of either
> silently discarding or rejecting mail to that address.  It is perhaps
> more "friendly" to users who fail to notice the "noreply" localpart
> to reject.
> 
>     transport:
>         nore...@example.org     error:5.1.1 This address does not receive 
> email
>         nom...@example.org      discard:silently
> 
> The "nomail" variant is for silent discards, and is probably not what
> you want in most cases, but is sometimes appropriate.

These are good hints.  How does the error:5.1.1 interact with other
servers that attempt sender address verification?  Does that fail for
them or does it still allow the message through?  Otherwise I think
the discard:silently is really the better choice so that sender
address verification passes.

Meanwhile...  In the immediately next thread you said this:

Viktor Dukhovni wrote in the "postfix and MX" thread:
> Just in case someone gets the wrong impression about MX records being
> required...
> 
> It is more than "not RFC friendly", it is simply broken viz. the public
> Internet.  Many legitimate sending domains have no MX records, this is
> normal.  Refusing mail from non-MX domains does damage to the email
> ecosystem.

Right!

Bob

Reply via email to