02d14796cc
Some checks failed
ci/woodpecker/push/default Pipeline was canceled
TripIt's native signup-verification + account-recovery mail (ADR-0028) sends From: trips@viktorbarzin.me while authenticating SMTP as spam@. With SPOOF_PROTECTION on, Postfix smtpd_sender_login_maps requires an EXPLICIT alias (the @domain catch-all doesn't satisfy it) — mirrors the existing plans@->spam@ grant. Must be applied + verified before TripIt flips SMTP_FROM to trips@, else every verification/recovery send is rejected 550. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
21 lines
1.2 KiB
Text
21 lines
1.2 KiB
Text
firmly-gerardo-generated@viktorbarzin.me me@viktorbarzin.me
|
|
closely-keith-generated@viktorbarzin.me vbarzin@gmail.com
|
|
literally-paolo-generated@viktorbarzin.me viktorbarzin@fb.com
|
|
hastily-stefanie-generated@viktorbarzin.me elliestamenova@gmail.com
|
|
vaultwarden@viktorbarzin.me me@viktorbarzin.me
|
|
|
|
# plans@ -> spam@: authorizes tripit (SMTP-authed as spam@) to send mail
|
|
# From: plans@viktorbarzin.me under docker-mailserver SPOOF_PROTECTION (the
|
|
# smtpd_sender_login_maps union exact-matches this alias to spam@; the @domain
|
|
# catch-all does NOT, so an explicit entry is required). Also keeps inbound
|
|
# plans@ routing to spam@ for the tripit mail-ingest poller.
|
|
plans@viktorbarzin.me spam@viktorbarzin.me
|
|
|
|
# trips@ -> spam@: same send-as grant for tripit's NATIVE auth email (ADR-0028 —
|
|
# signup-verification + account-recovery mail). tripit authenticates SMTP as
|
|
# spam@ and sends From: trips@viktorbarzin.me; SPOOF_PROTECTION's
|
|
# smtpd_sender_login_maps union exact-matches this alias to spam@ (the @domain
|
|
# catch-all does NOT). MUST be applied + verified BEFORE tripit flips SMTP_FROM
|
|
# to trips@, or every verification/recovery send is rejected (550 sender). Also
|
|
# routes any inbound trips@ to spam@.
|
|
trips@viktorbarzin.me spam@viktorbarzin.me
|