Gmail from Pi

Re: Re: Gmail from Pi By: snipped-for-privacy@alfter.diespammersdie.us to Shaun Buzza on Tue Apr 05 2022 08:28 pm

Actually, many VPS come with their own blacklisted IP.

If you use a cheapo provider such as Hetzner they are very likely to give you an IP which used to be assigned to somebody else, and if that person managed to get it into a blacklist, so you will be.

Better still would be to host it on a VPS. If it's mail-only, you can probably find something for $5-$10 per month that'll run Postfix and Dovecot. There'll probably even be enough spare horsepower to get something like Roundcube running, if you want a webmail interface. I've hosted my own mail for the better part of 20 years.

Unlike your home IP address, the address you get with a VPS shouldn't be on any DNSBLs. Home IP address blocks have long since been added to dynamic-IP blocklists; any attempt to send mail from one will almost certainly fail.

Last I checked, Oracle were giving away ARM-based cloud VMs ...

Oracle never give anything away! But all cloud vendors are following AWS' lead, the latest being being Azure with Ampere ARM cores

---druck

Oracle are actually about the most generous with the free VPS deal, not expiring after one year like the deal AWS offers. Here's a recent review:

I believe x86 VPSs are also available as the "AMD Compute" option, though at lower specs than the ARM ones.

Intel based ones as well - but the ARM ones are fruitier.

Can any provider do anything else ? The pool of never used IP addresses must be getting very small by now, IANA ran out of ranges ages ago. I suppose a careful provider could put dirtied IP addresses aside for scrubbing - but getting an IP address out of blacklists is not going to be easy, it's probably impossible to completely clear them all - does anyone bother ?

I've bounced my VPS around between multiple providers over the years...mostly in the US, but I had one in Germany for a while. Blocked IPs have pretty much not been a problem.

The only blocklist-related trouble I've had was when the scammers behind UCEPROTECT decided to blackball all of Linode's IP space. That wouldn't have been a problem (nobody pays any attention to UCEPROTECT and their extortion tactics) if Microsoft hadn't decided to use a UCEPROTECT list. Email wasn't getting through to Hotmail, Outlook.com, etc. Some tickets filed with both Linode and Microsoft got the two of them talking, and shortly after that, the mail was flowing again.

_/_ / v \ Scott Alfter (remove the obvious to send mail) (IIGS(

Top-posting! \_^_/ >What's the most annoying thing on Usenet?

Adrian:

I hear that Sypheed Claws supports OAuth:

What is this -- Google's abomination or a truely free authentification protocol?

It's an open standard published by the IETF. It had its origins at Twitter and is used by them, Google, Facebook, Amazon ... to provide a way of sharing user IDs between providers.

When I was at Yahoo! we used it to get fresh data from Facebook, Gmail ... into Yahoo! front page widgets. I don't recall for sure now whether that data streamed through Yahoo! servers or was merged in the browser - I think it streamed through Yahoo! but only the stuff that showed in the widget and only when the user was online.

Which is still more than I am personally comfortable with!

In message snipped-for-privacy@ku.gro.lloiff>, Adrian snipped-for-privacy@ku.gro.lioff> writes

I've had time to have a play, and the initial results were not encouraging.

$ (cat header.txt ; echo "Test Message") | msmtp <my address>

msmtp: /etc/msmtprc: line 7: invalid argument xoauth2 for command auth

The above link also suggests that oauthbearer might be acceptable instead of xoauth2, but that comes back with the same error.

msmtp is version 1.8.3-1

However (after more playing about) ...

leaving the auth parameter as on, but using the 16 character code generated by Google instead of my password, it appears to work.

Adrian

doc claiming xoauth2 was 1.8.20 I think

yep, "app passwords" will also continue to work when "less secure apps" is turned off, you need to have 2FA/2SV turned on in order to generate the app password.

Which I did.

Adrian

If I generate an outh gmail password for one program (e.g. Thunderbird), can I then just use that same password for any other program, or do I need to generate one password for each program? Must that program support oauth?

Thanks.

I haven't tried it, thunderbird does let you view the oauth "token" that is generated as a result of the web sign-in, theoretically the token will expire and need renewing in the future, not happened to me yet though.

Thanks!