I'm currently sending emails from various Pis via Gmail. I'm assuming that the
forthcoming changes to Gmail authentication will break this. Has anyone worked
out how to resolve this ? I've had a look online, but nothing has shown up. I'm using a combination of msmtp and mpack to send.
Adrian wrote:
I'm currently sending emails from various Pis via Gmail.á I'm
assuming that the forthcoming changes to Gmail authentication will
break this. Has anyone worked out how to resolve this ?á I've had a
look online, but nothing has shown up. I'm using a combination of
msmtp and mpack to send.
msmtp seems to support "auth xoauth2"
<https://marlam.de/msmtp/msmtp.html#Authentication-commands>
I'm currently sending emails from various Pis via Gmail. I'm assuming
that the forthcoming changes to Gmail authentication will break this.
Has anyone worked out how to resolve this ? I've had a look online, but nothing has shown up. I'm using a combination of msmtp and mpack to send.
Thanks
Adrian
I'm currently sending emails from various Pis via Gmail. I'm assuming
that the forthcoming changes to Gmail authentication will break this.
Has anyone worked out how to resolve this ? I've had a look online, but nothing has shown up. I'm using a combination of msmtp and mpack to
send.
Find a provider that isn't trying to lock you into their surveillance state.
I had to enable DKIM on my mail server. This seemed to resolve most of the issues I had with gmail.
It's not impossible to set up your own email server at home, provided you have a valid web address to route it through..._______________^^^^^^^^^^^
On Sat, 02 Apr 2022 20:28:21 +1200 nospam.Shaun.Buzza@f110.n229.z1.fidonet.org (Shaun Buzza) wrote:
It's not impossible to set up your own email server at home, provided you_______________^^^^^^^^^^^
have a valid web address to route it through...
You do know that global email is more than a decade older than
the world wide web ? Make that a domain you'll need. You will also need a static IP address (you can use DDNS but things are going to be iffy when
the IP address changes, especially if the new holder of your old IP is also running a mail server) for your mail server. Then you'll need to configure
it - offline until you have it secure!
Once you have the basics you'll need to set up incoming and
outgoing SMTP - you'd best find a trusted relay for outgoing because
unless that static IP address is on your own network (you have an ASN and
an IP range) then it's almost certainly in a blacklisted domestic range and nobody will accept mail originating there. That's before you get into all
the fun and games required to be a trusted mail source in this massively
spam filtered world even when your IP address isn't on some blacklist along with the rest of the range.
Many ISPs seem to have given up trying to maintain their own
trusted relays (probably because sooner or later some idiot customer tries spamming) and will reluctantly tell you of one you can use but refuse to guarantee delivery through it. I went for the free tier of a commercial provider whose main customers are businesses that need reliable email and don't want the trouble of running their own.
Once you have the incoming and outgoing transport set up you'll
need spam filtering, delivery, and an IMAP and/or POP3 server unless
delivery is to a single machine. If you want access outside your LAN for
POP3 and IMAP then you'll have to think about security - a VPN into the LAN is one option (the one I use).
Oh yes on the subject of security the less there is running on your router the harder it is to hack the network from outside - so don't run
your mail servers on the router, instead run every service in its own container on an internal host.
Yes it is possible to run your own mail server at home, I do it
and I wouldn't have it any other way. It is nowhere near as simple as it was in 1992 when I first did it with KA9Q.
You do know that global email is more than a decade older than
the world wide web ? Make that a domain you'll need. You will also need a static IP address (you can use DDNS but things are going to be iffy when
the IP address changes, especially if the new holder of your old IP is also running a mail server) for your mail server. Then you'll need to configure it - offline until you have it secure!
That said, I am willing to believe that if you serve a significant number
of users, one will eventually act dickish and get you in a spam list,
which is where I guess problems will begin.
There are comercial SMTP relays out there which will act as your output
point for a fee, so even if you DO have probems keeping your
infrastructure reputable, you can pay this trouble off if need be.
I'm currently sending emails from various Pis via Gmail.
It is a lot easier to do it on a VPS. And safer
On Sun, 3 Apr 2022 09:35:01 +0100
The Natural Philosopher <tnp@invalid.invalid> wrote:
It is a lot easier to do it on a VPS. And safer
I feel safer with the data inside my firewall on my storage[1], but
yes putting the relay(s) outside on a VPS is a good approach especially if you lock down the link to the outgoing relay to a VPN.
[1] The thing with a VPS is the hypervisor has an open door below the OS to the VPS "hardware" so everything on a VPS is wide open to anyone with
control of the hypervisor.
On Sat, 2 Apr 2022 15:44:46 +0100, Adrian wrote:
I'm currently sending emails from various Pis via Gmail.
Personally, I wouldn't touch Gmail, Microsoft or any other free mail
service because I *know* they'll be selling everything they can find out about me to anybody that wants it: how else do you think they can provide
a 'free' service to you?
It's not impossible to set up your own email server at home, provided
you have a valid web address to route it through...
The bottom line is that it is not that difficult or expensive to do and as part of a hobby, it can actually be enjoyable.
in the same way that all of your email is open to anyone with admin
access to e.g. gmails servers?
About a year ago my ISP, Telus, decided to get out of the e-mail hosting business. They sold their entire customer list (including the telus.net domain) to Google. So now all former Telus mail customers' traffic is subject to Google's analytics - as well as the U.S. Patriot Act despite their being Canadian.
In other words, be your own provider? Any company that offers 'free' email is >making their money somewhere else...often through the sale of 'user data'...
It's not impossible to set up your own email server at home, provided you have >a valid web address to route it through...
In other words, be your own provider? Any company that offers 'free' emai >making their money somewhere else...often through the sale of 'user data'
If anyone can make money out of a daily summary of my weather station data, good luck to them.
It's not impossible to set up your own email server at home, provided you >a valid web address to route it through...
That may well be the case, but, for various reasons, it is something
that I have no desire to do.
Find a provider that isn't trying to lock you into their surveillance state.
In other words, be your own provider? Any company that offers 'free' email is making their money somewhere else...often through the sale of 'user data'...
It's not impossible to set up your own email server at home, provided you have
a valid web address to route it through...
Better still would be to host it on a VPS. If it's mail-only, you can probably find something for $5-$10 per month that'll run Postfix and
Dovecot.
On 05/04/2022 21:31, Andy Burns wrote:
scott@alfter.diespammersdie.us wrote:
Better still would be to host it on a VPS. If it's mail-only, you can
probably find something for $5-$10 per month that'll run Postfix and
Dovecot.
Last I checked, Oracle were giving away ARM-based cloud VMs ...
Oracle never give anything away! But all cloud vendors are following
AWS' lead, the latest being being Azure with Ampere ARM cores https://www.theregister.com/2022/04/05/microsoft_ampere_azure_vm/
scott@alfter.diespammersdie.us wrote:
Better still would be to host it on a VPS. If it's mail-only, you can probably find something for $5-$10 per month that'll run Postfix and Dovecot.
Last I checked, Oracle were giving away ARM-based cloud VMs ...
Shaun Buzza <nospam.Shaun.Buzza@f110.n229.z1.fidonet.org> wrote:
Find a provider that isn't trying to lock you into their surveillance state.
In other words, be your own provider? Any company that offers 'free' email making their money somewhere else...often through the sale of 'user data'.
It's not impossible to set up your own email server at home, provided you have
a valid web address to route it through...
Better still would be to host it on a VPS. If it's mail-only, you can probably find something for $5-$10 per month that'll run Postfix and Dovecot. There'll probably even be enough spare horsepower to get something like Roundcube running, if you want a webmail interface. I've hosted my own mail for the better part of 20 years.
Unlike your home IP address, the address you get with a VPS shouldn't be on any DNSBLs. Home IP address blocks have long since been added to
dynamic-IP blocklists; any attempt to send mail from one will almost certainly fail.
Actually, many VPS come with their own blacklisted IP.
If you use a cheapo provider such as Hetzner they are very likely to give
you an IP which used to be assigned to somebody else, and if that person managed to get it into a blacklist, so you will be.
Re: Re: Gmail from Pi
By: scott@alfter.diespammersdie.us to Shaun Buzza on Tue Apr 05 2022 08:28 pm
Unlike your home IP address, the address you get with a VPS shouldn't
be on any DNSBLs. Home IP address blocks have long since been added to dynamic-IP blocklists; any attempt to send mail from one will almost certainly fail.
Actually, many VPS come with their own blacklisted IP.
If you use a cheapo provider such as Hetzner they are very likely to give
you an IP which used to be assigned to somebody else, and if that person managed to get it into a blacklist, so you will be.
I'm currently sending emails from various Pis via
Gmail. I'm assuming that the forthcoming changes to
Gmail authentication will break this. Has anyone
worked out how to resolve this ? I've had a look on-
line, but nothing has shown up. I'm using a combina-
tion of msmtp and mpack to send.
I hear that Sypheed Claws supports OAuth:
https://www.claws-mail.org/faq/index.php/Oauth2
What is this -- Google's abomination or a truely free
authentification protocol?
In message <jarbd6Fktp1U1@mid.individual.net>, Andy Burns ><usenet@andyburns.uk> writes
Adrian wrote:
I'm currently sending emails from various Pis via Gmail.á I'm
assuming that the forthcoming changes to Gmail authentication will
break this. Has anyone worked out how to resolve this ?á I've had a
look online, but nothing has shown up. I'm using a combination of
msmtp and mpack to send.
msmtp seems to support "auth xoauth2"
<https://marlam.de/msmtp/msmtp.html#Authentication-commands>
Thanks, I'll have a play when I've got some time.
msmtp is version 1.8.3-1doc claiming xoauth2 was 1.8.20 I think
leaving the auth parameter as on, but using the 16 character code generated by
Google instead of my password, it appears to work.
Adrian wrote:
leaving the auth parameter as on, but using the 16 character code >>generated by Google instead of my password, it appears to work.
yep, "app passwords" will also continue to work when "less secure apps"
is turned off, you need to have 2FA/2SV turned on in order to generate
the app password.
yep, "app passwords" will also continue to work when "less secure apps" is turned off, you need to have 2FA/2SV turned on in order to generate the app password.
If I generate an outh gmail password for one program (e.g. Thunderbird), can I
then just use that same password for any other program, or do I need to generate
one password for each program? Must that program support oauth?
David Taylor wrote:
If I generate an outh gmail password for one program (e.g. Thunderbird), can I
then just use that same password for any other program, or do I need to generate
one password for each program? Must that program support oauth?
I haven't tried it, thunderbird does let you view the oauth "token" that is generated as a result of the web sign-in, theoretically the token will expire and need renewing in the future, not happened to me yet though.
| Sysop: | deepend |
|---|---|
| Location: | Calgary, Alberta |
| Users: | 240 |
| Nodes: | 10 (0 / 10) |
| Uptime: | 09:34:46 |
| Calls: | 1,464 |
| Calls today: | 2 |
| Files: | 3,372 |
| Messages: | 360,447 |