Re: James SMTP

so my config for now is good?
can i send full smtp config to u? :)

29.04.2025 16:50, Quan tran hong пишет:
> Hi,
>
> You *should not use* <authorizedAddresses>0.0.0.0/0</authorizedAddresses> —
> this would trust all IP addresses and could turn your server into an *open
> relay*, which is a serious security risk and will get your domain
> blocklisted.
>
> Please improve your domain reputation instead, IMO.
>
> Quan
>
> On Tue, Apr 29, 2025 at 4:43 PM Терсков Илья Андреевич
> <[email protected]> wrote:
>
>> Hi there guys :)
>>
>> i checking my config and cant clearly understand one thing
>>
>> <authorizedAddresses>127.0.0.0/8</authorizedAddresses> should i change
>> it to <authorizedAddresses>0.0.0.0/0</authorizedAddresses>
>> because with such config mails goint out and come in but some rare
>> domains cant get our mails and sometimes cant send them to me
>>
>> thanks for any help
>> full config for 25 port
>>
>>       <smtpserver enabled="true">
>>           <jmxName>smtpserver-global</jmxName>
>>           <bind>0.0.0.0:25</bind>
>>           <helloName autodetect="false">mail.kps-t.ru</helloName>
>>           <heloEnforcement>true</heloEnforcement>
>>           <connectionBacklog>200</connectionBacklog>
>>           <tls socketTLS="false" startTLS="true">
>> <privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
>> <certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
>>           </tls>
>>           <connectiontimeout>360</connectiontimeout>
>>           <connectionLimit>0</connectionLimit>
>>           <connectionLimitPerIP>0</connectionLimitPerIP>
>>           <auth>
>>               <announce>never</announce>
>>               <requireSSL>false</requireSSL>
>>               <plainAuthEnabled>false</plainAuthEnabled>
>>           </auth>
>> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>           <verifyIdentity>false</verifyIdentity>
>>           <maxmessagesize>25M</maxmessagesize>
>> <addressBracketsEnforcement>true</addressBracketsEnforcement>
>>           <smtpGreeting>mail.kps-t.ru</smtpGreeting>
>>           <handlerchain>
>>               <handler
>> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>>               <handler
>> class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>>           </handlerchain>
>>       </smtpserver>
>>
>> --
>> С уважением,
>> Руководитель ИТ ООО <КПС-Технологии>
>> Терсков Илья Андреевич
>> Тел.: +7 (3843) 73-14-42
>> Моб.: +7-996-415-16-29
>> e-mail: [email protected]
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>>
-- 
С уважением,
Руководитель ИТ ООО <КПС-Технологии>
Терсков Илья Андреевич
Тел.: +7 (3843) 73-14-42
Моб.: +7-996-415-16-29
e-mail: [email protected]