efa-project.org

So I'll answer this for anyone who may actually need this.

So first: saslauthd is compiled without sasldb support on RHEL9 (yes, sounds crazy, was already that way on RHEL7).
Because of this, all testsaslauthd tests will fail, regardless of what you configure.

Step 1: Install cyrus sasl auth ...

Just to clarify a couple of things:

There is already the setting smtpd_tls_security_level = may which is for the smtp daemon, receiver side.
Setting smtp_tls_security_level = may for the sender process wasn't present.

'm using letsencrypt with e-F-a, but AFAIK the script behind letsencrypt does ...

Hello,

When sending outgoing emails, gmail said my messages weren't encrypted.
After some investigations, it looks like e-F-a does indeed accept TLS, but does not try STARTTLS when sending messages.

After adding smtp_tls_security_level = may to main.cfg, google didn't complain anymore.

Just a ...

Hello,

Using eFa 4.0.4, I get the following when testing email sending with https://www.mail-tester.com/

-0.001 SPF_HELO_NONE SPF: HELO does not publish an SPF Record

Once I add smtp_helo_name = $mydomain to main.cfg, it's resolved and I get

0.001 SPF_HELO_PASS SPF: HELO matches SPF record ...

For me a did the job.

I would indeed like to know how long that cache lasts, and if it's useful to perform a scheduled cache cleaning.