4 ms·

I’m afraid I don’t. This was in fact why I stopped hosting a mail server for friends, way back when. I realised that if most of them put their gmail address in

I’m afraid I don’t. This was in fact why I stopped hosting a mail server for friends, way back when. I realised that if most of them put their gmail address in ~/.forward, any spam they received on their account on my domain, gmail would count towards my domain / ip instead of the original sender. This is a fundamental flaw with current email implementations; there is no equivalent to something like the “trusted downstream proxies” list.[1] I always wondered why gmail wouldn’t have a (per account) setting to say: “I am forwarding mail from this host / domain / address”, with corresponding trust of Received: headers chain. If I could then add a header in forwarded mails requiring that to be set, somehow, then we could avoid this SPF / DMARC problem entirely. The fundamentals are there (received: headers and DKIM). All we need is some last mile config :( But it would promote decentralisation, so I’m not holding my breath. [1] random search result of such an implementation: https://github.com/tornadoweb/tornado/pull/1864/files https://github.com/tornadoweb/tornado/pull/1864/files

cm2187 8y ago
But why doing email forwarding. If it is a custom domain, why not simply use gmail as your MX entries?
- jacobush 8y ago
  Maybe some aliases are forwarded or whatever. I could see myself doing it if I didn't get the warning above. (Thanks!) In fact, I was possibly about to next month as a way to easily relay from an about to be disused address to a new address at gmail (or whatever my "friend" chooses to migrate to.)
- mehrdadn 8y ago
  Confused, how does that work? How would Gmail know which mailbox to put an email it gets for an address in a different domain?
  - cm2187 8y ago
    Gmail like pretty much every other providers offers to manage custom domains. You point your mx entries to them, you setup the mailbox and aliases on the google side, and you have a emails in yourdomain.com running using gmail behind the scene. Just google "gmail custom domain".
    - mehrdadn 8y ago
      Oh, so you mean GSuite, not Gmail. That severely restricts your freedom with the mailboxes and addresses you can have on your own domain.
      - ValentineC 8y ago
        > That severely restricts your freedom with the mailboxes and addresses you can have on your own domain. How so?
      - judge2020 8y ago
        The e-mail routing in Gsuite is very customizable, the only downside to using Gsuite (basic) is that it'll put you down $5 a month and if you use email aliases you can only send from those aliases via gmail.com (or a mail client that supports them).
- nothrabannosir 8y ago
  It was a shared host for different users. None of them wanted to manage another inbox, they just wanted incoming mail forwarded to their personal mail (gmail, hotmail, whatever). Compare to e.g. an outsourcing firm who wants their contractors to be reachable at duder@dudesinc.com, but doesn’t want them all to have to manage another inbox. This is very hard to achieve, due to the problem mentioned above. This was not an actual business , just friends playing around with servers back in uni. But it made me realise this is a pretty fundamental issue with SMTP. The protocol is doomed to centralise.
teddyh 8y ago
> I realised that if most of them put their gmail address in ~/.forward, any spam they received on their account on my domain, gmail would count towards my domain / ip instead of the original sender. I had that same problem; I ended up adding all those users and addresses to /etc/postfix/relocated.
icebraining 8y ago
You could use IMAP to push the emails to the Gmail account (either by dropping them to a maildir and periodically syncing, or using a script to push as they are received, e.g. https://stackoverflow.com/a/11973425 https://stackoverflow.com/a/11973425)
- cm2187 8y ago
  Ha ha. Imap hacked into a mail delivery system. Except that it requires to trust the guy who runs the forwarding server with your gmail credentials.
  - tankenmate 8y ago
    Not necessarily, you can use Oauth2 tokens extension on gmail; that way you don't need to hand over your password(s). Mind you it does nothing to protect you against the token bearer fooling with your mailbox.
- nothrabannosir 8y ago
  That’s horrible :p I love it. Unfortunately not a realistic solution if you want to offer forwarding to your users without holding their hand and assuming even more config and management woes. This was a shared host, with a domain, and a bunch of user accounts. In theory, every user does 'echo me@ilovemomma.com > ~/.forward' on first login and they’re all set! Old school UNIX elegance. But in practice, it marks the start of a slow descent into the spam swamp.
deleted 8y ago
[deleted]

cm2187 8y ago

But why doing email forwarding. If it is a custom domain, why not simply use gmail as your MX entries?

jacobush 8y ago
Maybe some aliases are forwarded or whatever. I could see myself doing it if I didn't get the warning above. (Thanks!) In fact, I was possibly about to next month as a way to easily relay from an about to be disused address to a new address at gmail (or whatever my "friend" chooses to migrate to.)
mehrdadn 8y ago
Confused, how does that work? How would Gmail know which mailbox to put an email it gets for an address in a different domain?
- cm2187 8y ago
  Gmail like pretty much every other providers offers to manage custom domains. You point your mx entries to them, you setup the mailbox and aliases on the google side, and you have a emails in yourdomain.com running using gmail behind the scene. Just google "gmail custom domain".
  - mehrdadn 8y ago
    Oh, so you mean GSuite, not Gmail. That severely restricts your freedom with the mailboxes and addresses you can have on your own domain.
    - ValentineC 8y ago
      > That severely restricts your freedom with the mailboxes and addresses you can have on your own domain. How so?
    - judge2020 8y ago
      The e-mail routing in Gsuite is very customizable, the only downside to using Gsuite (basic) is that it'll put you down $5 a month and if you use email aliases you can only send from those aliases via gmail.com (or a mail client that supports them).
nothrabannosir 8y ago
It was a shared host for different users. None of them wanted to manage another inbox, they just wanted incoming mail forwarded to their personal mail (gmail, hotmail, whatever). Compare to e.g. an outsourcing firm who wants their contractors to be reachable at duder@dudesinc.com, but doesn’t want them all to have to manage another inbox. This is very hard to achieve, due to the problem mentioned above. This was not an actual business , just friends playing around with servers back in uni. But it made me realise this is a pretty fundamental issue with SMTP. The protocol is doomed to centralise.

teddyh 8y ago

> I realised that if most of them put their gmail address in ~/.forward, any spam they received on their account on my domain, gmail would count towards my domain / ip instead of the original sender. I had that same problem; I ended up adding all those users and addresses to /etc/postfix/relocated.

icebraining 8y ago

You could use IMAP to push the emails to the Gmail account (either by dropping them to a maildir and periodically syncing, or using a script to push as they are received, e.g. https://stackoverflow.com/a/11973425 https://stackoverflow.com/a/11973425)

cm2187 8y ago
Ha ha. Imap hacked into a mail delivery system. Except that it requires to trust the guy who runs the forwarding server with your gmail credentials.
- tankenmate 8y ago
  Not necessarily, you can use Oauth2 tokens extension on gmail; that way you don't need to hand over your password(s). Mind you it does nothing to protect you against the token bearer fooling with your mailbox.
nothrabannosir 8y ago
That’s horrible :p I love it. Unfortunately not a realistic solution if you want to offer forwarding to your users without holding their hand and assuming even more config and management woes. This was a shared host, with a domain, and a bunch of user accounts. In theory, every user does 'echo me@ilovemomma.com > ~/.forward' on first login and they’re all set! Old school UNIX elegance. But in practice, it marks the start of a slow descent into the spam swamp.

deleted 8y ago

[deleted]