Some remarks upfront:<li>Please inform readers about checking their IP reputation upfront - as it can be a real burden to start out 'bad'.</li><li>The default TLS config is decent, but it currently isn't able to score 100% at internet.nl. LibreSSL doesn't currently support EMS with TLSv1.2 (only supporting TLSv1.3 means that a lot of mail traffic is going to be plain text).</li><li>I personally think that RBLs are more of a requirement than a nice to have. However, using them would be best with Unbound. If that is not an option: use different, stable and non rate-limiting DNS servers from different parties.</li><li>In addition to the former, a filter for FCrDNS mismatches prevents a lot of junk too.</li>
Michael Lucas' book does use Postfix - but explains the concepts of a mail server in general and has some pretty neat tips in there too. Can recommend it - even just as an inspiration.
h3artbl33d :openbsd: :antifa:
npub1y9…z900y
2026-05-25 08:01:35 UTC
in reply to nevent1q…l2wx
Author Public Key
npub1y90887enayft4damsycxahzuwa87jvx3vhrq37c74wdzv9vdgvcq2z900yPublished at
2026-05-25 08:01:35 UTCEvent JSON
{
"id": "c9f0d42943a11c27cf4f0857d63f78c914824d1f46841bb486ea78b386d12203",
"pubkey": "215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330",
"created_at": 1779696095,
"kind": 1,
"tags": [
[
"e",
"5f2a42edca9b2399dee1ef32003596d720d3d2b50171afe99c8530fc40dc7180",
"",
"root",
"40d281fb86c5bfe993b45a6fbda1f3819d43e89311e2960cb95ca05d59867392"
],
[
"p",
"40d281fb86c5bfe993b45a6fbda1f3819d43e89311e2960cb95ca05d59867392"
],
[
"proxy",
"https://exquisite.social/@h3artbl33d/116634163281859756",
"web"
],
[
"e",
"b026cc10a9a8694e5f3c5c6a178a2572e5c84bc7dbf9b5d258c51a8e73e95f2d",
"",
"reply",
"40d281fb86c5bfe993b45a6fbda1f3819d43e89311e2960cb95ca05d59867392"
],
[
"p",
"215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330"
],
[
"proxy",
"https://exquisite.social/users/h3artbl33d/statuses/116634163281859756",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://exquisite.social/users/h3artbl33d/statuses/116634163281859756",
"pink.momostr"
],
[
"-"
]
],
"content": "Some remarks upfront:\u003cli\u003ePlease inform readers about checking their IP reputation upfront - as it can be a real burden to start out 'bad'.\u003c/li\u003e\u003cli\u003eThe default TLS config is decent, but it currently isn't able to score 100% at internet.nl. LibreSSL doesn't currently support EMS with TLSv1.2 (only supporting TLSv1.3 means that a lot of mail traffic is going to be plain text).\u003c/li\u003e\u003cli\u003eI personally think that RBLs are more of a requirement than a nice to have. However, using them would be best with Unbound. If that is not an option: use different, stable and non rate-limiting DNS servers from different parties.\u003c/li\u003e\u003cli\u003eIn addition to the former, a filter for FCrDNS mismatches prevents a lot of junk too.\u003c/li\u003e\n\nMichael Lucas' book does use Postfix - but explains the concepts of a mail server in general and has some pretty neat tips in there too. Can recommend it - even just as an inspiration.",
"sig": "e004d358afbed98eb10e13675ced911cc68f1752b141caad0037368717bfe05aa89197b3830e876709db8d9ae6e1d35e307b21884bfa9a72ffc1babd9867ac3b"
}