Diff for "ServerMinsky"

Differences between revisions 1 and 8 (spanning 7 versions)

minsky.hcoop.net is a virtual machine at DigitalOcean that will become our primary mail server, and replaces ServerMcCarthy

It is named after professor Marvin Minsky.

1. Setup Notes

Similar issues as ServerMarsh:

had to manually add "domain hcoop.net" to resolv.conf
had to open puppetserver port 8140 (bootstrap problem: new server can't connect to the puppetserver to request a cert, so it can't add its ip to the whitelist...)
Default /etc/hosts is no good, sets marsh to loopback, with no ipv6. Had to munge like ServerGibran to public IP and add IPv6 alias. Really need to look deeper into this before perpetuating bad practice even further.

exim is not configured to forward mailman mail to mccarthy
make sure firewall allows spamd to contact external services
- everything is closed currently, so likely needs to be updated
- Not sure if sa-update works either
we don't have a dns cache enabled, do we need one to avoid annoying zen.spamhaus.org ?
- https://www.spamhaus.org/organization/dnsblusage/ zen has 100k message / 300k lookup per day ... something we will not hit for a long time
- but also upstream dns servers are blocked from URIBL so we may need one anyway

Exim can't lookup addresses if there are no vmail users present
- This makes mailNodes_admin not work.
spamassassin addrs are only updated when someone toggle their status with setsa, this needs to also happen during a domtool-admin regen

-  ⇤ ← Revision 1 as of 2018-04-22 21:28:03 → 
  Size: 762
  Editor: ClintonEbadi
  Comment: new mail server minsky
+   ← Revision 8 as of 2018-04-24 04:04:45 → ⇥
  Size: 1703
  Editor: ClintonEbadi
  Comment: spamd needs some additional work
-Deletions are marked like this.
+Additions are marked like this.
 Line 10:
-Line 13:
+Line 12:
+== TODO ==

 * courier
 * ejabberd

== Immediate Issues ==

 * exim is not configured to forward mailman mail to mccarthy
 * make sure firewall allows spamd to contact external services
   * everything is closed currently, so likely needs to be updated
   * Not sure if sa-update works either
 * we don't have a dns cache enabled, do we need one to avoid annoying zen.spamhaus.org ?
   * https://www.spamhaus.org/organization/dnsblusage/ zen has 100k message / 300k lookup per day ... something we will not hit for a long time
   * but also [[http://uribl.com/refused.shtml|upstream dns servers are blocked from URIBL]] so we may need one anyway

== Exim ==

 * Exim can't lookup addresses if there are no vmail users present
   * This makes `mailNodes_admin` not work.
 * spamassassin addrs are only updated when someone toggle their status with `setsa`, this needs to also happen during a `domtool-admin regen`