96 Commits

Author	SHA1	Message	Date
link2xt	b702848c33	Replace rspamd rule weights with a strict rule	2024-01-18 17:24:36 +01:00
link2xt	a6f2f74520	Remove unused _configure_opendkim	2024-01-18 17:24:36 +01:00
link2xt	01ec341364	Disable ratelimit module like other modules	2024-01-18 17:24:36 +01:00
link2xt	998799fe3f	Do not return anything from remove_opendkim()	2024-01-18 17:24:36 +01:00
link2xt	6186dc5259	Actually disable phising, rbl and hfilter	2024-01-18 17:24:36 +01:00
missytake	5880133b5b	rspamd: remove redis (not needed)	2024-01-18 17:24:36 +01:00
missytake	6772bfe630	lint fixes, final touch	2024-01-18 17:24:36 +01:00
missytake	101c3a6b47	rspamd: reject emails with invalid SPF, DKIM, DMARC	2024-01-18 17:24:36 +01:00
missytake	5ef2100765	tests: use generic recipient for DKIM testing	2024-01-18 17:24:36 +01:00
missytake	d49aae365c	revert "Significantly lower ratelimit"	2024-01-18 17:24:36 +01:00
missytake	998a185332	rspamd: generate DKIM keys with rspamadm	2024-01-18 17:24:36 +01:00
missytake	3e78555ca1	rspamd: install rspamd + redis	2024-01-18 17:24:36 +01:00
missytake	01cfd0be19	tests: add test for rejecting SPF & DMARC fails	2024-01-18 17:24:36 +01:00
missytake	1bdc547479	lint: fix 3 issues	2024-01-18 17:24:36 +01:00
missytake	c0b8ba816d	rspamd: Significantly lower ratelimit; without read receipts this should be more than fine	2024-01-18 17:24:36 +01:00
missytake	118ae49674	rspamd: add redis-server for caching	2024-01-18 17:24:36 +01:00
missytake	a47df20e22	rspamd: disable RBL checks	2024-01-18 17:24:36 +01:00
missytake	a1d8881887	rspamd: add rate limiting	2024-01-18 17:24:36 +01:00
missytake	cd7416a0dd	disable some unnecessary rspamd modules	2024-01-18 17:24:36 +01:00
missytake	173e3f6390	do DKIM signing with rspamd instead of openDKIM	2024-01-18 17:24:36 +01:00
missytake	b8d53242cf	DNS: added www subdomain to zonefile	2024-01-18 17:24:36 +01:00
link2xt	c65f618fb1	nginx: redirect www. to non-www	2024-01-18 17:24:36 +01:00
link2xt	42afad0852	Fix indentation in nginx.conf.j2	2024-01-18 17:24:36 +01:00
link2xt	8bc19439a9	dns: require www. subdomain and request TLS certificate for it	2024-01-18 17:24:36 +01:00
link2xt	cdaddb9b0f	dns: check mta-sts CNAME directly without resolving to IP	2024-01-18 17:24:36 +01:00
missytake	90e7169eef	lint: fix issues	2024-01-12 16:24:45 +01:00
missytake	3db7933d8b	greeterbot: port to chatmail	2024-01-12 16:20:39 +01:00
missytake	bcc54602ee	postfix: cleanup submission headers	2024-01-05 12:13:31 +01:00
missytake	f9998d5721	tests: if sender's public IP address is in the Received header	2024-01-05 12:13:31 +01:00
nudeldudel	8605ceba5e	Update master.cf.j2 ... Add submission-header-cleanup to reduce the meta-data	2024-01-05 12:13:31 +01:00
link2xt	70b0e9d5e5	postfix: increase compatibility_level to 3.6	2023-12-27 00:29:12 +01:00
missytake	fdd533aa3b	acmetool: stop nginx so acmetool-redirector can start	2023-12-25 23:45:40 +01:00
link2xt	a44ed0aeb3	Use dig +short option to simplify DNS parsing ... Without this option parsing of answer was flaky as for long records like _submission._tcp.nine.testrun.org. dig printed the result with a space rather than tab as a separator and .split("\t") did not work. This change makes the `dig` command print the answer in the form we need so there is no need for complex parsing other than taking the first line. `-r` option is added to make sure options are not changed by .digrc in the root home directory.	2023-12-22 21:49:12 +00:00
link2xt	f5bfa6bd56	test: test scanning QR code	2023-12-21 22:22:38 +00:00
link2xt	81a6f8808b	fix: escape login and password when passed from dovecot to doveauth ... This should allow to use / in the password	2023-12-21 22:22:38 +00:00
missytake	46d5dbb07d	DNS: nicer output for reverse DNS/PTR records. fixes #143	2023-12-20 19:26:50 +01:00
missytake	d2e0d1fecc	DNS: flush_zone before validating DNS entries. fixes #140	2023-12-20 19:26:50 +01:00
missytake	d333cfdd5a	lint: fix 1 issue	2023-12-20 19:26:50 +01:00
missytake	40a3a2cc86	tests: make test init work with reachable chatmail_domain	2023-12-20 19:26:50 +01:00
missytake	fe978a1971	DNS: increase SSH command's timeout to 10 seconds (the default)	2023-12-20 19:26:50 +01:00
missytake	b426c2e7ff	DNS: error if can't connect with SSH. fixes #144	2023-12-20 19:26:50 +01:00
missytake	b626464453	cmdeploy: fail init and run if SSH doesn't connect	2023-12-20 19:26:50 +01:00
missytake	76c3316f02	cmdeploy init: make output green if DNS is correct	2023-12-19 19:39:49 +01:00
missytake	a6a9406228	DNS: making CLI output slightly prettier	2023-12-19 19:39:49 +01:00
missytake	7921f5dd0b	DNS: fix some crashes in cmdeploy dns	2023-12-19 19:39:49 +01:00
missytake	39fc9d628f	cmdeploy: only run cmdeploy dns after cmdeploy run	2023-12-19 19:39:49 +01:00
link2xt	85a9183b61	Do not call show_dns with run args	2023-12-19 19:39:49 +01:00
missytake	36a4381484	DNS: use local dig if ssh fails	2023-12-19 19:39:49 +01:00
missytake	5ff98a571c	DNS: commit hpk's suggestion	2023-12-19 19:39:49 +01:00
missytake	0a91aeb4a3	cmdeploy: simplify check_necessary_dns output	2023-12-19 19:39:49 +01:00