Opened 3 months ago
Closed 3 months ago
#3306 closed task (fixed)
Upgrade discourse mail-receiver app
Reported by: | robe | Owned by: | |
---|---|---|---|
Priority: | normal | Milestone: | Sysadmin Contract 2024-I |
Component: | SysAdmin/Discourse | Keywords: | |
Cc: |
Description
Looks like our discourse mail-receiver app hasn't been updated in a while and quite a few changes since.
Change History (5)
comment:1 by , 3 months ago
comment:2 by , 3 months ago
Resolution: | → fixed |
---|---|
Status: | new → closed |
Just did a test to confirm it is working as there seemed to be a delay receiving sac. The sac eventually came thru though.
It looks like it's now doing more intensive checks of spf and dmarc. I'll monitor to see if this helps any with the spam I was seeing in www-info
To check I've been using this
docker logs mail-receiver -f
I see this:
<22>Oct 27 03:44:02 opendkim[24]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf)Adding user `postfix' to group `opendmarc' ... <86>Oct 27 03:44:02 usermod[31]: add 'postfix' to group 'opendmarc'<86>Oct 27 03:44:02 usermod[31]: add 'postfix' to shadow group 'opendmarc'Done. <22>Oct 27 03:44:02 opendmarc[39]: OpenDMARC Filter v1.4.2 starting (args: -c /etc/opendmarc.conf)<22>Oct 27 03:44:02 opendmarc[39]: additional trusted authentication services: (none)postfix: Postfix is using backwards-compatible default settings Oct 27 03:44:02 discourse-mail-receiver postfix[51]: Postfix is using backwards-compatible default settings postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details Oct 27 03:44:02 discourse-mail-receiver postfix[51]: See http://www.postfix.org/COMPATIBILITY_README.html for details postfix: To disable backwards compatibility use "postconf compatibility_level=3.6" and "postfix reload" Oct 27 03:44:02 discourse-mail-receiver postfix[51]: To disable backwards compatibility use "postconf compatibility_level=3.6" and "postfix reload" Starting Postfix Oct 27 03:44:03 discourse-mail-receiver postfix/master[1]: daemon started -- version 3.7.11, configuration /etc/postfix Oct 27 03:54:00 discourse-mail-receiver postfix/smtpd[122]: warning: hostname 188-190-10-253.clevhosting.com does not resolve to address 188.190.10.253: Name or service not known Oct 27 03:54:00 discourse-mail-receiver postfix/smtpd[122]: connect from unknown[188.190.10.253] Oct 27 03:54:00 discourse-mail-receiver postfix/smtpd[122]: lost connection after AUTH from unknown[188.190.10.253] Oct 27 03:54:00 discourse-mail-receiver postfix/smtpd[122]: disconnect from unknown[188.190.10.253] ehlo=1 auth=0/1 commands=1/
So it looks like it's doing some dmarc, spf checks now, but probably some things we need to configure with POSTCONF_ variables to get rid of some of those warnings.
I'll open a separate ticket for that.
comment:3 by , 3 months ago
Resolution: | fixed |
---|---|
Status: | closed → reopened |
I seem to be missing the last note from this ticket and logs show that discourse might be not fully trusting trac. I'm going to switch osgeo.org to use mail.osgeo.org to see if that helps any
Oct 27 03:57:07 discourse-mail-receiver postfix/cleanup[141]: 8B33D18B01C: message-id=<049.5c8829934d865a896fbfec522a179b44@osgeo.org> <22>Oct 27 03:57:07 opendmarc[39]: implicit authentication service: discourse-mail-receiver.localdomain<22>Oct 27 03:57:07 opendmarc[39]: 8B33D18B01C: osgeo.org failOct 27 03:57:07 discourse-mail-receiver postfix/qmgr[120]: 8B33D18B01C: from=<trac_osgeo@osgeo.org>, size=2404, nrcpt=1 (queue active) Oct 27 03:57:07 discourse-mail-receiver postfix/smtpd[135]: disconnect from secure.osgeo.osuosl.org[140.211.15.57] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 <23>Oct 27 03:57:07 receive-mail[143]: Recipient: sac-tickets@discourse.osgeo.orgOct 27 03:57:07 discourse-mail-receiver postfix/pipe[142]: 8B33D18B01C: to=<sac-tickets@discourse.osgeo.org>, relay=discourse, delay=0.74, delays=0.35/0.01/0/0.38, dsn=2.0.0, status=sent (delivered via discourse service) Oct 27 03:57:07 discourse-mail-receiver postfix/qmgr[120]: 8B33D18B01C: removed
comment:5 by , 3 months ago
Resolution: | → fixed |
---|---|
Status: | reopened → closed |
Upgraded with