From 9888efe55dddbb789e40be1bb7da5412361653fe Mon Sep 17 00:00:00 2001 From: Florent Daigniere Date: Sun, 5 Sep 2021 18:23:08 +0200 Subject: [PATCH] Document as suggested on #mailu-dev --- core/postfix/start.py | 5 ++--- docs/faq.rst | 16 ++++++++++++++++ 2 files changed, 18 insertions(+), 3 deletions(-) diff --git a/core/postfix/start.py b/core/postfix/start.py index 19c23c19..9f35cf73 100755 --- a/core/postfix/start.py +++ b/core/postfix/start.py @@ -80,9 +80,8 @@ if os.path.exists("/overrides/mta-sts-daemon.yml"): conf.jinja("/etc/mta-sts-daemon.yml", os.environ, "/etc/mta-sts-daemon.yml") if not os.path.exists("/etc/postfix/tls_policy.map.lmdb"): - with open("/etc/postfix/tls_policy.map", "w") as f: - for domain in ['example.com']: - f.write(f'{domain}\tsecure\n') + with open("/etc/postfix/tls_policy.map", "a") as f: + pass os.system("postmap /etc/postfix/tls_policy.map") if "RELAYUSER" in os.environ: diff --git a/docs/faq.rst b/docs/faq.rst index 43fb8606..01557237 100644 --- a/docs/faq.rst +++ b/docs/faq.rst @@ -422,6 +422,22 @@ Any mail related connection is proxied by nginx. Therefore the SMTP Banner is al .. _`1368`: https://github.com/Mailu/Mailu/issues/1368 +My emails are getting defered, what can I do? +````````````````````````````````````````````` + +Emails are asynchronous and it's not abnormal for them to be defered sometimes. That being said, Mailu enforces secure connections where possible using DANE and MTA-STS, both of which have the potential to delay indefinitely delivery if something is misconfigured. + +If delivery to a specific domain fails because their DANE records are invalid or their TLS configuration inadequate (expired certificate, ...), you can assist delivery by downgrading the security level for that domain by creating an override at ``overrides/postfix/tls_policy.map`` as follow: + +.. code-block:: bash + + domain.example.com may + domain.example.org encrypt + +The syntax and options are as described in `postfix's documentation`_. Re-creating the smtp container will be required for changes to take effect. + +.. _`postfix's documentation`: http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps + 403 - Access Denied Errors ---------------------------