1

Topic: iRedMail and Tailscale

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.7.4 PGSQL edition.
- Deployed with iRedMail Easy or the downloadable installer? Downloadable installer
- Linux/BSD distribution name and version: Debian 12 Bookworm
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello all,

I would like to set up iRedMail so that the SMTP server only accepts mail from localhost for applications such as roundcube and from a tailscale IP address. That way, only devices on my tailscale network can send mail.

For postfix, I added the tailscale IP addresses of the mail server along with whatever device I want to give permission to send mail in the main.cf file. Example:

mynetworks = 127.0.0.1 [::1] 111.111.111.111 222.222.222.222

Tailscale IP for the mail server: 111.111.111.111
Tailscale IP for a different machine: 222.222.222.222

Directly above this, it is written:

# trusted SMTP clients which are allowed to relay mail through Postfix.
#
# Note: additional IP addresses/networks listed in mynetworks should be listed
#       in iRedAPD setting 'MYNETWORKS' (in `/opt/iredapd/settings.py`) too.
#       for example:
#
#       MYNETWORKS = ['xx.xx.xx.xx', 'xx.xx.xx.0/24', ...]
#

This variable does not exist in my setting.py file. Is it safe to create it?

Thanks for any help.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: iRedMail and Tailscale

How about add a firewall rule instead?

3

Re: iRedMail and Tailscale

Yeah, that's a better idea. Thank you. smile