<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Dovecot on Damien Dye&#39;s Blog</title>
    <link>https://blogs.damiendye.uk/en/tags/dovecot/</link>
    <description>Recent content in Dovecot on Damien Dye&#39;s Blog</description>
    <generator>Hugo</generator>
    <language>en-GB</language>
    <lastBuildDate>Thu, 22 Oct 2026 18:50:00 +0100</lastBuildDate>
    <atom:link href="https://blogs.damiendye.uk/en/tags/dovecot/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Postfix, DANE And Every Setting Done Properly</title>
      <link>https://blogs.damiendye.uk/en/email/postfix-dane-done-properly/</link>
      <pubDate>Thu, 22 Oct 2026 18:50:00 +0100</pubDate>
      <guid>https://blogs.damiendye.uk/en/email/postfix-dane-done-properly/</guid>
      <description>A Postfix 3.10 build that refuses plaintext both ways, uses DANE or MTA-STS on every outbound hop, relays only for a login, ties each login to its own address in envelope and From header, drops unknown sender domains, and rejects SPF and DKIM failures in Rspamd. Every reply captured over IPv4 and IPv6, with the traps.</description>
    </item>
  </channel>
</rss>
