As of Monday I’m going away on vacation until beginning of August, so
just a brief update on the status of mx[12].o.o -
mx[12].o.o are both ready to relay email for “opensuse.org”, with TLS
support but without spam and virus filtering. (see below).
TLS: I borrowed the certificates from pontifex, but of course they
should be automagically distributed instead. (from crtmgr.i.o.o)
Member aliases are being retrieved from connect.o.o (thanks for the hint
Christian) once a day, with a consistency check.
I have created mailing list aliases based on existing lists on baloo.
Firewall is open for smtp traffic only.
Lars says reverse entries for the IP addresses should be ready end of
week.
Freshclam – updated to log to its own logfile, and notify admin-auto
when the software is outdated. (which it is). I wonder if we should
just build from source, sometimes new clamav versions come in rapid
succession.
Spam- and virus-filtering: I have had to disable rspamd, there is some
config issue. milter unix:/run/rspamd/worker-proxy.socket: can't read
SMFIC_BODYEOB reply packet header
For now, I have used postgrey to do selective greylisting, but I am
worried about the lack of spam filtering, we could easily end up being
blacklisted. I'll be taking a closer look at the rspamd setup.
Note – baloo depends on spamassassin headers to identify HTML messages.
Not very critical.
Ratelimiting - for certain known destinations.
Outbound delivery - I guess we have to change relay.i.o.o ?
--
Per Jessen, Zürich (20.8°C)
Member, openSUSE Heroes
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org