Re: advice on securing a transport

2016-09-06 Thread Eric Abrahamsen
Sean Greenslade writes: > On Mon, Sep 05, 2016 at 08:17:40PM +0200, Sebastian Nielsen wrote: >> Sean Greenslade: >> Thats the responsibility of the server who is authorized to act on behalf of >> that domain. > > Yes, however I am trying to make this discussion relevant to the OP's > question. Au

Re: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 08:17:40PM +0200, Sebastian Nielsen wrote: > Sean Greenslade: > Thats the responsibility of the server who is authorized to act on behalf of > that domain. Yes, however I am trying to make this discussion relevant to the OP's question. Authenticating based solely on origina

Re: advice on securing a transport

2016-09-05 Thread lists
t I would trust a postfix implementation more.   Original Message   From: Sebastian Nielsen Sent: Monday, September 5, 2016 11:18 AM To: postfix-users@postfix.org Subject: SV: SV: advice on securing a transport LazyGranch: I look it at the point of view of the server who are receiving the mail. So basical

SV: SV: advice on securing a transport

2016-09-05 Thread Sebastian Nielsen
LazyGranch: I look it at the point of view of the server who are receiving the mail. So basically, the OP has some email adress like "webapprecei...@example.org" that receives mail and processes this automatically into a database. Only authorized users are allowed to send to this specifically craf

Re: advice on securing a transport

2016-09-05 Thread lists
pers that a client which could flag failed DKIM and SPF was worthy. Their solution was look at the header.   Original Message   From: Sebastian Nielsen Sent: Monday, September 5, 2016 10:24 AM To: postfix-users@postfix.org Subject: SV: advice on securing a transport No, you're wrong. What the O

Re: SV: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 07:23:10PM +0200, Sebastian Nielsen wrote: > No, you're wrong. What the OP should do, is to enforce SPF/DKIM on > specific RECEIVERS. For example, enforcing SPF/DKIM on for example > webappad...@example.org. It's important to remember what each step is actually authenticati

SV: advice on securing a transport

2016-09-05 Thread Sebastian Nielsen
ör li...@lazygranch.com Skickat: den 5 september 2016 19:20 Till: postfix-users@postfix.org Ämne: Re: advice on securing a transport ‎First of all, be wary taking advice from a newbie like me. That said, if you enforce SPF and DKIM in postfix, you will be rejecting a lot of mail. If there is a way to enforce SP

Re: advice on securing a transport

2016-09-05 Thread lists
, but this mail will, if I understand the objective, with be "machine" read. That step is where you want to enforce SPF and DKIM.    Original Message   From: Sebastian Nielsen Sent: Monday, September 5, 2016 9:54 AM To: postfix-users@postfix.org Subject: SV: advice on securing a

SV: advice on securing a transport

2016-09-05 Thread Sebastian Nielsen
ected. -Ursprungligt meddelande- Från: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] För Sean Greenslade Skickat: den 5 september 2016 18:36 Till: Eric Abrahamsen Kopia: postfix-users@postfix.org Ämne: Re: advice on securing a transport On Mon, Sep 05, 2016 at 07:52:02PM +0800,

Re: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 07:52:02PM +0800, Eric Abrahamsen wrote: > I have a postfix/dovecot installation on the same server as my company's > webapp. This webapp involves a lot of regular data entry, which is a > real pain to do using HTML forms. What I would really like to do is be > able to send

advice on securing a transport

2016-09-05 Thread Eric Abrahamsen
I have a postfix/dovecot installation on the same server as my company's webapp. This webapp involves a lot of regular data entry, which is a real pain to do using HTML forms. What I would really like to do is be able to send structured emails to the server, and have postfix pass them through a tra