[SOLVED] Adding domains to allow list

[KatyComputer]

When we add a domain to the allow list (/#pmgMailProxyConfiguration:whitelist) does PMG still check SPF/DKIM records?

What about subdomains?

This gui change:


Creates this Postfix configuration change:

/etc/postfix/senderaccess:/^.+@ameren\.com$/ OK

 

[Stoiko Ivanov]

When we add a domain to the allow list (/#pmgMailProxyConfiguration:whitelist) does PMG still check SPF/DKIM records?

Yes and no...
the smtp-proxy whitelist circumvents the SPF-check (in the SMTP proxy Options).
This check happens during the smtp-dialog and if a domain has a hard reject '-all' listed and the sending is not listed the mail gets rejected.

However the mails are still checked in the rule-system by SpamAssassin, which assigns (quite low) scores based on wrong DKIM/SPF values.

The 3 levels of allow/deny lists are described in the reference documentation:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_whitelist_overview

What about subdomains?

subdomains need to be explicitly listed (or you use a regex which covers subdomains and the domain)

I hope this explains it