From: Allen Mulvey <allen@amulvey.com>
To: "piclist@mit.edu" <piclist@mit.edu>
Sender: "piclist-bounces@mit.edu" <piclist-bounces@mit.edu>
Date: Mon, 7 Jun 2021 14:27:42 -0700
Subject: Re: [OT]Re: testing - is anybody there?
Thread-Topic: [OT]Re: testing - is anybody there?
Thread-Index: Addb5XXndF+eyydSS4afXnMR7uQ1Dg==
Message-ID: <642ac647-e616-163a-fc4d-3f5c8c4c9368@amulvey.com>
References: <b2c5fe87-6a66-c87e-43a7-174e4dd886d2@allotrope.net>
	<20210606232246.6237a8d2@raspberry>
	<f0f45011-e801-1c75-8466-36c876bf86bb@amulvey.com>
	<a79bca35-aeb0-c982-ea3b-c7467e5c66fe@allotrope.net>
	<05344641-901b-5f06-1707-717198da8ccb@amulvey.com>
	<85f323a-1b90-ed22-3ba0-fe217c2327ce@allotrope.net>
In-Reply-To: <85f323a-1b90-ed22-3ba0-fe217c2327ce@allotrope.net>
Reply-To: Microcontroller discussion list - Public. <piclist@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-SenderIdResult: Pass
X-MS-Exchange-Organization-PRD: mit.edu
X-MS-TNEF-Correlator:
received-spf: Pass (protection.outlook.com: domain of amulvey.com designates
	24.169.71.174 as permitted sender) receiver=protection.outlook.com;
	client-ip=24.169.71.174; helo=mulvey.us;
dkim-signature: v=1; c=relaxed/relaxed;
	h=to:references:from:subject:message-id:date:mime-version:in-reply-to:content-type;
	d=amulvey.com; s=amulvey; a=rsa-sha256;
	bh=BU0+3BXc5XabQvXSzkQkhyQuLBxp4erAcbJHbsHAClA=;
	b=F8GyN4se9h1ERKr8PunqdMoH1FbAfr0UvlF2n8c0FbupPIqnKsyi+tWUaCtyCPBUm
	tWPp+Bh1h78FZ4f9YC22ZwjTwC1rVEzD0yYwc3NpFvK5VxsrISNFhv7vpPlqp0vLHk2
	+GY9cTnTpiQJTR7dIrgI8N0SO3/9m7+K4thnYQ4=;
authentication-results: spf=pass (sender IP is 24.169.71.174)
	smtp.mailfrom=amulvey.com; mit.edu; dkim=pass (signature was verified)
	header.d=amulvey.com;mit.edu; dmarc=bestguesspass action=none
	header.from=amulvey.com;
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0)
 Gecko/20100101	Thunderbird/78.11.0
errors-to: piclist-bounces@mit.edu
list-id: "Microcontroller discussion list - Public." <piclist.mit.edu>
list-post: <mailto:piclist@mit.edu>
x-beenthere: piclist@mit.edu
x-mailman-version: 2.1.6
x-topics: [OT]
x-content-filtered-by: Mailman/MimeDel 2.1.6
x-me-bayesian: 0.000000
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Sergio,

My VM hosts my mail server and my web server. My gateway router uses=20
port forwarding on the necessary well-known ports. There is no proxy.=20
For mail administration, as a system administrator, I can log into the=20
VM and access everything in one place. This is necessary for most global=20
settings. However routine administration is done by a designated=20
administrator for each post office. He then uses a web app to access=20
only his own post office. A post office may have more than one domain=20
although most have only one. Clients may use webmail or any standard POP=20
or IMAP client app. I'm not sure if I answered your question.

Allen

On 6/7/2021 11:08 AM, smplx wrote:
>
> On Mon, 7 Jun 2021, Allen Mulvey wrote:
>
>> I don't have anywhere near that much traffic but neither do I process
>> anything manually. For each filter I specify if a response should be
>> made and to whom.
>>
>> My server is a VM hosted on a Hyper-V server.
>>
>> Allen
>>
> Hi Allen,
>
> I didn't meen to imply that 20,000+ emails a day were legitimate emails.
> 99.5% are spam - so something had to be done!!!
>
> Postfix is very flexible, has an internal configuarable filter mechanism
> and also allows you to add your own external filters. Its biggest downfal=
l
> (IMHO) is that there are over 900 configuration options (not to mention
> the great many combinations of settings of these options) which makes it
> very difficult to configure if you are not using it as a "simple" mail
> server with a common (out of the box) canned template.
>
> The biggest problem I had with running the server on a machine other than
> the gateway (in this case a virtual machine) was that the NAT interfered
> with the senders address and so made it impossible to reject the emails
> BEFORE they got queued. The standard way of getting around this was to pu=
t
> an SMTP proxy (actually another instance of Postfix) on the gateway and
> forward the mail to the server. But this still left the proxy exposed and
> the gateway vulnerable.
>
> Does your VM act as a server to other machines or do you log onto it and
> handle all your mail directly on that? Do you use a proxy outside the VM
> to forward the mail ***INTO*** the VM?
>
> Regards
> Sergio

--=20
http://www.piclist.com/techref/piclist PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist
.