viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(mailserver): add trips@ send-as alias for TripIt native auth email (ADR-0028)
Some checks failed
ci/woodpecker/push/default Pipeline was canceled
Details

Browse source 
TripIt's native signup-verification + account-recovery mail (ADR-0028) sends From: trips@viktorbarzin.me while authenticating SMTP as spam@. With SPOOF_PROTECTION on, Postfix smtpd_sender_login_maps requires an EXPLICIT alias (the @domain catch-all doesn't satisfy it) — mirrors the existing plans@->spam@ grant. Must be applied + verified before TripIt flips SMTP_FROM to trips@, else every verification/recovery send is rejected 550.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-06-20 20:10:47 +00:00
parent 3278588325
commit 02d14796cc
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
stacks/mailserver/modules/mailserver/extra/aliases.txt
View file

@ -10,3 +10,12 @@ vaultwarden@viktorbarzin.me me@viktorbarzin.me
# catch-all does NOT, so an explicit entry is required). Also keeps inbound
# plans@ routing to spam@ for the tripit mail-ingest poller.
plans@viktorbarzin.me spam@viktorbarzin.me
# trips@ -> spam@: same send-as grant for tripit's NATIVE auth email (ADR-0028 —
# signup-verification + account-recovery mail). tripit authenticates SMTP as
# spam@ and sends From: trips@viktorbarzin.me; SPOOF_PROTECTION's
# smtpd_sender_login_maps union exact-matches this alias to spam@ (the @domain
# catch-all does NOT). MUST be applied + verified BEFORE tripit flips SMTP_FROM
# to trips@, or every verification/recovery send is rejected (550 sender). Also
# routes any inbound trips@ to spam@.
trips@viktorbarzin.me spam@viktorbarzin.me