From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 66CAD1FF135 for ; Sun, 03 May 2026 17:02:40 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 9106AB756; Sun, 3 May 2026 17:02:39 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; t=1777820517; cv=none; d=google.com; s=arc-20240605; b=US5p6DxMDpveRi0nHDJivfMS+YD0y4Hq8hsfzNRbvvmPC2qwz1OX4uEPbCEL5YhyXp z761riGXbCIoLICTmgj3n2FsVI3JALiNKAinz1f5WcP3b92sX4UtDAAmSqil1tA3q70Z X90v5ICLCXIxqp9IRVIl1OD32MFdg0GTuEOoiqkDQ0qCycS2ARAileZFuj7qc4sTlMU0 wu5UDk4vZjr11sI20qx8q8NT18q6QCyRjtzCloGm7+1Rd3372wdwmh+xQeR2YWJa9+3V cLvtLJ6FoPeY5pgONZ0o15P1DqdqdWXiYju9GE+Pv/zqiXwXYLFCB7me4cFyHlxYWe62 q0FA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=6sICHNFlsVPYBi1vNgaZP/Pf8R86LaTRh7RaNWLKDJ0=; fh=TMv+HJPidt2zWFSE+eSRQ0jfPsIv9tzc42Yl64o82Fc=; b=AqeK14F6IO3yRryk1sYJLR6HwT8l+dzLybmU5+JoywsORTdKpzE8A70XBkqv8fqknj SDhUnggjuVpzFeWATRO8h2cDycUADivX1mxcmN1P2s89FbCbDfSSVh2Xgmyg8v08JU1R WL5AfgiWnIriC7wcbKT2oCuwRc1iXmp1MhITeBU+ffz58esRdcKOd1CRhR1rNElbqDZp pM5+9y3zgtI005acg3BjOzPEU8MRM8IVlhp3r+2+IjDjNgttNBBpQ4AiQCilz+KeAbbC CRe5a8f1jDteoSJuZwxpWBkBIIS18koRLPnL+R6/96SjhJTkOvomAbwUJnGqE6Oc3N2s UlFQ==; darn=lists.proxmox.com ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1777820517; x=1778425317; darn=lists.proxmox.com; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=6sICHNFlsVPYBi1vNgaZP/Pf8R86LaTRh7RaNWLKDJ0=; b=cXVkT0NgMUbcTtC3eF+LsjIp5L77un0eDpOeRQ9Sog5N9OBA4HEQFDbYvDdtSyPpgh 7D4Ydq/vvVs2jEM6rETVw/cd1JfB11pnIn8u3lVlsMuKiiWqbkmX9dT3sMSYmqee8cm1 mxn32zu0K5Q8j8jB0uuApfSdlemz9pVO8xHg4dbRdS0YBt6oNuSKXoHfhJl79qPhJjy4 seK5z07nW2OHf3QATJ0f90xMRgL/vcy2RRcG0PunxgLq8UMs5giAASi2s2NksB6smyUC PEuKtyWFHZBv2i6FgaUqAGmL/ebFChe8ivCh98mswMvOJME8AJz6IndJfveXIDlP7c2X EkZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777820517; x=1778425317; h=to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=6sICHNFlsVPYBi1vNgaZP/Pf8R86LaTRh7RaNWLKDJ0=; b=kYlAnrD83OYVwRpl2SoCUc+aZT2rIbwxgCnfSPdsL+hqywEiF0KT5FUUjq61p3Ybxw TpcwVN2EC1/4HUVU9pcST9dnEm/U6riC74DBBbXbhjapNw8nQL98G9TMASTalqfYqgM9 q2Xpe0x11e+U2AfWBqpgHwRwTB7NSlNsvFXNhDEOko69cv9oQUp+UP1qsD+dQy7WjKzK k5RWUM+ApF2uhw1MA9X7xtjh+vnbQhEwQa6ossS3ZJmIUwVHxg0ggYALYypf15okfDsv YV+/dqzI1/WeBRoF6NQlTIZKZ8lg6G3YgoT82Ypv2Q0WweGuTTQ1JYLEOClOb0z6mHGo odgw== X-Gm-Message-State: AOJu0Ywbfdnw74qDlQSx7mCxCx4G6BFeR/mqBu47W1FE/9VMsGnZiMPJ mgdMIWYd61QnARarkJkmQILMfdsW/ie1UNE+8m9LXMw2uLmcKz5iOdCo6910y0lxjfbRdSQVI5w DGzXc/MJJYmkJ3K0bac+lW+0tnWi4kL+jnKl8 X-Gm-Gg: AeBDiet84mqChjm8JND5U5JaG5tczX1+12zzCDoliSTAkcEKQM/pxzRFFYDHI3Cr1mT KUDWtaMmGggxAXlAQvzqsRcXTg9HY/FKdKaBBuMvgppNrXHUHdWFK+AJLpkLM2E9qQl7w6o3sEf GpL3OLTsLhOwp5IEO0ZA0x6mQpm3UehJb/+q9RcNSvOZF/l+O/CApx63oNPrxEg2v94J4pwauSj Bt8Kb+O5BvZGNMTZxc55iWpTVn2CnzdBf9K6eKgEW6Pl1Is3McFZ5gzr6JlXNOLgrVJRYS73URs y0bLZrIHuhaNY9wl1Fg1GUnx3jjfifVZuxIIWlTxvx/ZXn8dEik= X-Received: by 2002:a05:600c:3e07:b0:489:201c:dc46 with SMTP id 5b1f17b1804b1-48a98640536mr102281615e9.12.1777820517296; Sun, 03 May 2026 08:01:57 -0700 (PDT) MIME-Version: 1.0 From: Maksim Usmanov Date: Sun, 3 May 2026 17:03:48 +0200 X-Gm-Features: AVHnY4IRh-k_b596nVYhf5M2qrc1rkPqCXvIYv7KTiujaR_Wm3G7x4Vn5rBz4m8 Message-ID: Subject: Move permit_mynetworks to smtpd_relay_restrictions in default master.cf.in To: pmg-devel@lists.proxmox.com Content-Type: text/plain; charset="UTF-8" X-SPAM-LEVEL: Spam detection results: 0 AWL 0.063 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [cf.in,postfix.org] Message-ID-Hash: PJPVGLHPJYVJ2EGTFUYJPKF6NDXU36G6 X-Message-ID-Hash: PJPVGLHPJYVJ2EGTFUYJPKF6NDXU36G6 X-MailFrom: skamasle@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox Mail Gateway development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hi everyone, I'm trying to add a check_policy_service to Postfix using smtpd_recipient_restrictions, but I found a small limitation in the default PMG template (master.cf.in). Right now, the template has this: -o smtpd_recipient_restrictions=permit_mynetworks,reject_unauth_destination With this setup, it's hard to add a policy service safely because it needs to go after those two options to avoid relay issues. I know I can use a custom template, but maybe it makes sense to change the default one? If we move permit_mynetworks to smtpd_relay_restrictions as the Postfix docs suggest here: https://www.postfix.org/postconf.5.html#smtpd_relay_restrictions , it would be much easier to add custom checks or policy services later. Is there a specific reason to keep the current structure, or could we update it to follow Postfix recommendations and make it more flexible? Thanks for your help! Best regards, ---- Att: Maksim