#SenderRewritingScheme with #notqmail via #pkgsrc:

echo srs.dom.ain > control/srs_domain
echo "$SECRET" > control/srs_secrets
echo srs.dom.ain >> control/rcpthosts
echo srs.dom.ain:srs >> control/virtualdomains
echo "| srsfilter" > alias/.qmail-srs-default

+ MX for srs.dom.ain

#qmail lacks #TLS. #notqmail doesn't include it either (yet!). But if you install from #pkgsrc…

# chown qmaild:nofiles control/servercert.pem
# chmod 640 control/servercert.pem
# ln -s control/servercert.pem control/clientcert.pem
# update_tmprsadh
# /etc/rc.d/qmail restart

🔐

For our next trick with #notqmail from #pkgsrc:

Want to SMTP-reject SPF failures when the source domain specifies explicit-fail?

1. Add SPP_SPF_RESULT_FAIL="E550 spf_smtp_msg" to
control/tcprules/smtp
2. Run "/etc/rc.d/qmailsmtpd cdb"
3. There is no 3rd thing, is that clear?

Another neat trick with #notqmail from #pkgsrc:

The default SMTP configuration rejects nonexistent recipients.

(qmail famously accepts all recipients for its domains even when those recipients don't exist, and then has to queue totally avoidable bounce messages. But you won't.)

Another #notqmail from #pkgsrc trick:

To enable #greylisting, simply uncomment "greylisting-spp-wrapper" in control/smtpplugins. That’s it.

(Add any exempt recipient addresses to control/greylist/exemptrcpts, or entire recipient domains to control/greylist/exemptrcpthosts.)

Also: not a success, at least not in his eyes. I've had a much easier time making appreciable progress when working with folks in power positions who don't imagine themselves to be XP experts.

It ended a while back. The guy is still periodically hiring for job descriptions featuring #ExtremeProgramming, cashing in on his reputation in this niche. After plenty of time to decompress, I continue to feel the need to warn folks as best I can.

Ha. I wonder what the audience for that might be. My most recent talk (which was also the first in quite a while) was sort of in the same vein: schmonz.com/2024/05/10/n...

Yuuuuup

Demoralizing, too. Had me (and not only me) questioning my competence and perceptions. And the guy is still hiring.