link2xt
6186dc5259
Actually disable phising, rbl and hfilter
2024-01-18 17:24:36 +01:00
missytake
5880133b5b
rspamd: remove redis (not needed)
2024-01-18 17:24:36 +01:00
missytake
6772bfe630
lint fixes, final touch
2024-01-18 17:24:36 +01:00
missytake
101c3a6b47
rspamd: reject emails with invalid SPF, DKIM, DMARC
2024-01-18 17:24:36 +01:00
missytake
5ef2100765
tests: use generic recipient for DKIM testing
2024-01-18 17:24:36 +01:00
missytake
d49aae365c
revert "Significantly lower ratelimit"
2024-01-18 17:24:36 +01:00
missytake
998a185332
rspamd: generate DKIM keys with rspamadm
2024-01-18 17:24:36 +01:00
missytake
3e78555ca1
rspamd: install rspamd + redis
2024-01-18 17:24:36 +01:00
missytake
01cfd0be19
tests: add test for rejecting SPF & DMARC fails
2024-01-18 17:24:36 +01:00
missytake
1bdc547479
lint: fix 3 issues
2024-01-18 17:24:36 +01:00
missytake
c0b8ba816d
rspamd: Significantly lower ratelimit; without read receipts this should be more than fine
2024-01-18 17:24:36 +01:00
missytake
118ae49674
rspamd: add redis-server for caching
2024-01-18 17:24:36 +01:00
missytake
a47df20e22
rspamd: disable RBL checks
2024-01-18 17:24:36 +01:00
missytake
a1d8881887
rspamd: add rate limiting
2024-01-18 17:24:36 +01:00
missytake
cd7416a0dd
disable some unnecessary rspamd modules
2024-01-18 17:24:36 +01:00
missytake
173e3f6390
do DKIM signing with rspamd instead of openDKIM
2024-01-18 17:24:36 +01:00
missytake
b8d53242cf
DNS: added www subdomain to zonefile
2024-01-18 17:24:36 +01:00
link2xt
c65f618fb1
nginx: redirect www. to non-www
2024-01-18 17:24:36 +01:00
link2xt
42afad0852
Fix indentation in nginx.conf.j2
2024-01-18 17:24:36 +01:00
link2xt
8bc19439a9
dns: require www. subdomain and request TLS certificate for it
2024-01-18 17:24:36 +01:00
link2xt
cdaddb9b0f
dns: check mta-sts CNAME directly without resolving to IP
2024-01-18 17:24:36 +01:00
missytake
768bf2b22c
greeterbot: better comparison method
...
Co-authored-by: holger krekel <holger@merlinux.eu >
2024-01-18 17:09:23 +01:00
missytake
185e6f7d2a
greeterbot: address hpk's comments
2024-01-13 17:37:22 +01:00
missytake
90e7169eef
lint: fix issues
2024-01-12 16:24:45 +01:00
missytake
3db7933d8b
greeterbot: port to chatmail
2024-01-12 16:20:39 +01:00
link2xt
75b41641f0
doveauth: fix home directory returned from lookup_passdb
...
It is currently unused, but better have it correct
in case of enabling debugging options such as rawlogs.
2024-01-08 16:40:08 +00:00
link2xt
30a61972fb
Update autoconfig XML URL with RFC draft
...
Old page does not exist anymore and linking to web archive is not nice.
2024-01-08 16:33:04 +01:00
missytake
bcc54602ee
postfix: cleanup submission headers
2024-01-05 12:13:31 +01:00
missytake
f9998d5721
tests: if sender's public IP address is in the Received header
2024-01-05 12:13:31 +01:00
nudeldudel
8605ceba5e
Update master.cf.j2
...
Add submission-header-cleanup to reduce the meta-data
2024-01-05 12:13:31 +01:00
missytake
30bcf9ff77
www: change nine.testrun.org occurence to mail_domain
2024-01-05 12:12:52 +01:00
link2xt
70b0e9d5e5
postfix: increase compatibility_level to 3.6
2023-12-27 00:29:12 +01:00
missytake
fdd533aa3b
acmetool: stop nginx so acmetool-redirector can start
2023-12-25 23:45:40 +01:00
link2xt
a44ed0aeb3
Use dig +short option to simplify DNS parsing
...
Without this option parsing of answer was flaky
as for long records like
_submission._tcp.nine.testrun.org.
dig printed the result with a space rather
than tab as a separator and .split("\t") did not work.
This change makes the `dig` command print the answer
in the form we need so there is no need for complex parsing
other than taking the first line.
`-r` option is added to make sure options are not changed by .digrc
in the root home directory.
2023-12-22 21:49:12 +00:00
link2xt
f5bfa6bd56
test: test scanning QR code
2023-12-21 22:22:38 +00:00
link2xt
81a6f8808b
fix: escape login and password when passed from dovecot to doveauth
...
This should allow to use / in the password
2023-12-21 22:22:38 +00:00
link2xt
be3685519f
Document ports 80 and 443 and add more hyperlinks
2023-12-21 16:16:17 +00:00
missytake
2cf950e901
echo: fail if configure doesn't work
2023-12-21 01:06:23 +01:00
missytake
46d5dbb07d
DNS: nicer output for reverse DNS/PTR records. fixes #143
2023-12-20 19:26:50 +01:00
missytake
d2e0d1fecc
DNS: flush_zone before validating DNS entries. fixes #140
2023-12-20 19:26:50 +01:00
missytake
d333cfdd5a
lint: fix 1 issue
2023-12-20 19:26:50 +01:00
missytake
32238e99ab
tests: testing cmdeploy init only makes sense with a staging server as well now
2023-12-20 19:26:50 +01:00
missytake
40a3a2cc86
tests: make test init work with reachable chatmail_domain
2023-12-20 19:26:50 +01:00
missytake
fe978a1971
DNS: increase SSH command's timeout to 10 seconds (the default)
2023-12-20 19:26:50 +01:00
missytake
b426c2e7ff
DNS: error if can't connect with SSH. fixes #144
2023-12-20 19:26:50 +01:00
missytake
b626464453
cmdeploy: fail init and run if SSH doesn't connect
2023-12-20 19:26:50 +01:00
missytake
76c3316f02
cmdeploy init: make output green if DNS is correct
2023-12-19 19:39:49 +01:00
missytake
a6a9406228
DNS: making CLI output slightly prettier
2023-12-19 19:39:49 +01:00
missytake
7921f5dd0b
DNS: fix some crashes in cmdeploy dns
2023-12-19 19:39:49 +01:00
missytake
39fc9d628f
cmdeploy: only run cmdeploy dns after cmdeploy run
2023-12-19 19:39:49 +01:00
