Re: James SMTP

Quan tran hong <[email protected]> Tue, 29 Apr 2025 16:50:13 +0700
Newsgroups gmane.comp.jakarta.james.user
Message-ID <CAFG0j1DhdCxYo0JH=eVVRUgThiF+t8K=8V9msxFgYWo-Gt3juw@mail.gmail.com>
--000000000000c702bf0633e7ba51
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

You *should not use* <authorizedAddresses>0.0.0.0/0</authorizedAddresses> =
=E2=80=94
this would trust all IP addresses and could turn your server into an *open
relay*, which is a serious security risk and will get your domain
blocklisted.

Please improve your domain reputation instead, IMO.

Quan

On Tue, Apr 29, 2025 at 4:43=E2=80=AFPM =D0=A2=D0=B5=D1=80=D1=81=D0=BA=D0=
=BE=D0=B2 =D0=98=D0=BB=D1=8C=D1=8F =D0=90=D0=BD=D0=B4=D1=80=D0=B5=D0=B5=D0=
=B2=D0=B8=D1=87
<[email protected]> wrote:

> Hi there guys :)
>
> i checking my config and cant clearly understand one thing
>
> <authorizedAddresses>127.0.0.0/8</authorizedAddresses> should i change
> it to <authorizedAddresses>0.0.0.0/0</authorizedAddresses>
> because with such config mails goint out and come in but some rare
> domains cant get our mails and sometimes cant send them to me
>
> thanks for any help
> full config for 25 port
>
>      <smtpserver enabled=3D"true">
>          <jmxName>smtpserver-global</jmxName>
>          <bind>0.0.0.0:25</bind>
>          <helloName autodetect=3D"false">mail.kps-t.ru</helloName>
>          <heloEnforcement>true</heloEnforcement>
>          <connectionBacklog>200</connectionBacklog>
>          <tls socketTLS=3D"false" startTLS=3D"true">
> <privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
> <certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
>          </tls>
>          <connectiontimeout>360</connectiontimeout>
>          <connectionLimit>0</connectionLimit>
>          <connectionLimitPerIP>0</connectionLimitPerIP>
>          <auth>
>              <announce>never</announce>
>              <requireSSL>false</requireSSL>
>              <plainAuthEnabled>false</plainAuthEnabled>
>          </auth>
> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>          <verifyIdentity>false</verifyIdentity>
>          <maxmessagesize>25M</maxmessagesize>
> <addressBracketsEnforcement>true</addressBracketsEnforcement>
>          <smtpGreeting>mail.kps-t.ru</smtpGreeting>
>          <handlerchain>
>              <handler
> class=3D"org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>              <handler
> class=3D"org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>          </handlerchain>
>      </smtpserver>
>
> --
> =D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0=BD=D0=B8=D0=B5=D0=BC,
> =D0=A0=D1=83=D0=BA=D0=BE=D0=B2=D0=BE=D0=B4=D0=B8=D1=82=D0=B5=D0=BB=D1=8C =
=D0=98=D0=A2 =D0=9E=D0=9E=D0=9E <=D0=9A=D0=9F=D0=A1-=D0=A2=D0=B5=D1=85=D0=
=BD=D0=BE=D0=BB=D0=BE=D0=B3=D0=B8=D0=B8>
> =D0=A2=D0=B5=D1=80=D1=81=D0=BA=D0=BE=D0=B2 =D0=98=D0=BB=D1=8C=D1=8F =D0=
=90=D0=BD=D0=B4=D1=80=D0=B5=D0=B5=D0=B2=D0=B8=D1=87
> =D0=A2=D0=B5=D0=BB.: +7 (3843) 73-14-42
> =D0=9C=D0=BE=D0=B1.: +7-996-415-16-29
> e-mail: [email protected]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

--000000000000c702bf0633e7ba51--