SV: SV: advice on securing a transport

2016-09-05 Thread Sebastian Nielsen
LazyGranch: I look it at the point of view of the server who are receiving the mail. So basically, the OP has some email adress like "webapprecei...@example.org" that receives mail and processes this automatically into a database. Only authorized users are allowed to send to this specifically craf

Re: SV: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 07:23:10PM +0200, Sebastian Nielsen wrote: > No, you're wrong. What the OP should do, is to enforce SPF/DKIM on > specific RECEIVERS. For example, enforcing SPF/DKIM on for example > webappad...@example.org. It's important to remember what each step is actually authenticati

SV: advice on securing a transport

2016-09-05 Thread Sebastian Nielsen
tian Nielsen Sent: Monday, September 5, 2016 9:54 AM To: postfix-users@postfix.org Subject: SV: advice on securing a transport There is possibility to use SPF or DKIM to ensure the sender is not spoofed. For this particular service, you can run your SPF and/or DKIM validator in mandatory mode, eg, a m

SV: advice on securing a transport

2016-09-05 Thread Sebastian Nielsen
There is possibility to use SPF or DKIM to ensure the sender is not spoofed. For this particular service, you can run your SPF and/or DKIM validator in mandatory mode, eg, a missing SPF record will be treated as -all, and a missing DKIM signature is treated as a invalid one. Then you can actually