#haraka

Hey,

I have a question, I have users authenticated with gmail api (accesstoken).

I would like to use haraka intermediate smtp. Main reason for that I would like to slight modify outgoing messages.

I'm not sure if using haraka is correct solution at all.

I would like to modify outgoing email per recipient, so when user sends email to:

to: recipient1@example.com

cc: recipient2@example.com

both of them will get slightly different email (with token inserted per recipient).

If haraka is not a way to go can anyone give me some suggestions on how to approach that?

firebadam: modifying messages like that should be easy to do in Haraka. However I'm not sure about the GMail API accesstoken stuff though.

To use Haraka, they'd have to authenticate to Haraka instead or have it passthrough the authentication to Gmail.

In short - it's doable.

_smf_ thaks for the insight. Is there other way to take care of authentication with gmail? Idea would be to just relay message via smtp.gmail.com (but I have to authenticate first).

I think you can use ordinary SMTP AUTH stuff with gmail via the access tokens.

Details are here: https://developers.google.com/gmail/imap/xoauth...

(read the top bit, then scroll down to the SMTP section)

you basically send: "AUTH XOAUTH2 " + base64("user=" {User} "^Aauth=Bearer " {Access Token} "^A^A")

Ok thanks :) now I'm looking how to connect all the pieces of that puzzle :)

Hi all, I've just got a Haraka server up and running now with emails routing through it using an outbound connector from exchange online, but I now want to allow relaying of all emails from Haraka server to another server. In the docs it says I can use "force_route" to do something like this but I can't find the .ini files where I should edit things, should I create these files from scratch or can I download them from anywhere? T

as I see you sometimes have to create them from scratch (they are not generated for you), I would look in repo for example .ini file

but I'm new to haraka :P

firebadam: that's a fairly correct assessment regarding the .ini =)

Though I'm not familiar with the force_route one

Is there a tutorial saying how to setup haraka as simple relay to smtp.gmail.com

there isn't

regarding relaying, in the docs about relaying it says "Force routes and Destination Domains are enabled by setting in the [relay] section of relay.ini:"

I've search in the repo for this file but can't find a base example to use

you should do your forwarding here

and routing

ah ok, is this superceding the relay.ini then?

since haraka now has outbound support?

wait, you want outbound ?

as far as I know, you can't do outbound authenticated relay

so you can't relay via your gmail.com account

but why not just let haraka do the deliveries for you ?

last1: outbound can do AUTH: https://github.com/haraka/Haraka/blob/master/ou...

we are accepting emails into haraka from another mail server and then want to re-route all these emails on to another specific server

does that count as outbound?

_smf_: didn't check the source code, just the relay doc. good to know!

moatak: all that you need is smtp_forward tehn

However currently it only support PLAIN, LOGIN and MD5 - so you'll need to add OAUTH2 firebadam

when you say it only supports those types, what are those used for?

moatak: users sending authenticated e-mail

that's not your case

ah ok, so I just need to host/port in the smtp_forward and set enable_outbound=true

*need to edit host/port

moatak787: yeah

correct

I see also that there is per-domain configuration, where it routes to different hosts depending on domain

_smf_: I know you used qmail, did you also use vpopmail ?

last1: I used neither of those ;-)

is this the domain of just the recipient, or can haraka also route to different hosts based on the sender?

moatak: rephrase those please

moatak787: they're the domain of the recipient. Doing it by sender wouldn't really make any sense.

is it possible to route emails on to different hosts based on the sender domain, rather than the recipient domains?

smtp_forward/smtp_proxy is used just to send all mail onwards to a single server

reason I want to do it by sender is because I want to route the email back through the sender's mail servers for those servers to make the final delivery

If you wanted to send stuff to different domains based on the recipient domain, then you'd be better of using outbound and creating forced routes for the domains.

moatak787: oh yeah - I forgot you wanted to do that.

moatak787: it's doable, but you'll have to write a custom plugin that uses the get_mx hook.

Basically - you'll get the senders domain, then force all the MX lookups to go via the senders server.

_smf_: we will know the IP address of the server(s) to route back for each sender domain, and can store this in a lookup table somewhere to use, so ideally no need for MX lookups

moatak787: yeah - that's what I said. You have to *override* the get_mx hook which would normally do MX lookups and return the value based on the senders address from your lookup table instead.

ah ok makes sense

But for testing in the meantime using just one host to forward all emails to I can use the smtp_forward method

since we want to test the basic loop structure of routing back through the original sending server

to add that plugin into the queue, do I just create the "queue" directory in the plugins directory and create a file called smtp_forward.js?

no

it's straight in the root

ah I see that I also need to create an smtp_forward.ini, would this reside in the same directory?

you only need to create smtp_forward.ini

You put it in the config directory

ok, does the smtp_forward.ini file have to include anything specific or can I just add the keys and values I want?

if you want something specific you probably need to include it :)

i.e. can I just add three lines with the enable_outbound, host, and port keys

Yes

great thanks!

does simply adding the smtp_forward.ini file with those values enable this routing or do I have to uncomment something in a file to make sure this is included?

enable the plugin in the plugins file

add this line: queue/smtp_forward

ok thanks

I'm getting that the emails are being rejected because the recipient isn't in the haraka host_list, I checked the plugins file and I need to have at least one rcpt_to plugin for inbound mail

[13Haraka] 15msimerson closed pull request #1866: Added RabbitMQ vhost support (06master...06master) 02https://github.com/haraka/Haraka/pull/1866

how do I get it to accept relaying emails for all recipients?

moatak: add the domain you need to accept mails for in rcpt_to.routes file

enable that plugin too in the plugins file

so that haraka knows you wish to accept mail for that domain

is that the domain of the sender of the email or the recipients?

I want to relay outbound emails, so I will know the sender domains but the recipient ones can be anything

I'm not sure if I need to config outbound in haraka, or if that is more for send out emails directly from haraka (as opposed to relaying emails on from another server)

nobody relays by sender domain

you relay by trusted IP/smtp auth

or you accept mail for recipients you know you host

otherwise you are an open relay and you don't want that

^^ what he said

But then - if you already have a list of domains and IPs to relay messages back to - it's like that the source of the mail is probably the same IP, so you would simply allow relaying from the same IP.

Thinking out loud - you could also allow relaying by sender domain *if* you used a 2nd factor to determine if the source host and sender domain should be allowed to relay, and for that you could use SPF. e.g. if SPF=Pass && sender_domain is configured, then allow relaying.

yes I am trying to accept relaying based on IP

[13Haraka] 15msimerson opened pull request #1868: Get pool (06master...06get_pool) 02https://github.com/haraka/Haraka/pull/1868

I've added relay_acl_allow file with a list of IPs, and also the relay.ini file with acl=true

but I think I need to still enable relaying in another file?

since it is rejecting relaying emails