#qmail lacks #TLS. #notqmail doesn't include it either (yet!). But if you install from #pkgsrc…

\# chown qmaild:nofiles control/servercert.pem
\# chmod 640 control/servercert.pem
\# ln -s control/servercert.pem control/clientcert.pem
\# update_tmprsadh
\# /etc/rc.d/qmail restart

🔐
For our next trick with #notqmail from #pkgsrc:

Want to SMTP-reject SPF failures when the source domain specifies explicit-fail?

1. Add SPP_SPF_RESULT_FAIL="E550 spf_smtp_msg" to
control/tcprules/smtp
2. Run "/etc/rc.d/qmailsmtpd cdb"
3. There is no 3rd thing, is that clear?
Another neat trick with #notqmail from #pkgsrc:

The default SMTP configuration rejects nonexistent recipients.

(qmail famously accepts all recipients for its domains even when those recipients don't exist, and then has to queue totally avoidable bounce messages. But you won't.)
Another #notqmail from #pkgsrc trick:

To enable #greylisting, simply uncomment "greylisting-spp-wrapper" in control/smtpplugins. That’s it.

(Add any exempt recipient addresses to control/greylist/exemptrcpts, or entire recipient domains to control/greylist/exemptrcpthosts.)
Running #notqmail via qmail-run from #pkgsrc? Cool. Add #DKIM signing like so, then publish a TXT record with your default policy. Done!

#til about #notqmail

https://notqmail.org/

I've run #qmail back in the day, and if my memory serves me right it was the least annoying one to work with ;)

Since then I've mostly moved over to whatever the distro defaults to.

notqmail

We're pleased to announce notqmail 1.09.

notqmail is the collaborative Open Source successor to qmail and netqmail. It begins with stable, compatible, small releases to which existing qmail users can safely update, and aims to become a more extensible, more easily packaged, and more modern Mail Transport Agent suitable for most needs.

qmail's design principles haven't _always_ prevented bugs or holes, nor have they _always_ made adding new functionality easy. But pretty often we get both. And that's why we continue to invest in this codebase.

Project goals that have made particular progress in the 1.09 release:

- Preserve qmail's hard-earned security properties
- Reduce marginal cost of development
- Make packaging easier
- Provide sensible defaults

Some well-known patches have been merged; others will need some adjustment.

Full release notes: https://notqmail.org/releases/1.09

It's been almost four years since 1.08. Thanks for your patience. With continued focus on making development safer and faster, our next release will arrive much sooner. Feedback welcome, as always.

#email #selfhosting #qmail #netqmail #notqmail #smtp #smtpsmuggling #mailserver
1.09