link2xt
d575d62b18
rspamd: give the reason to MTA when incoming mail is rejected
...
This is not secret but makes it easier for mail server admins
to debug why chatmail does not accept their emails.
If the server generates bounce messages, users will also see this
and can redirect to their server support.
It also shows up in /var/log/rspamd/rspamd.log on chatmail server.
2024-01-14 13:12:46 +00:00
link2xt
7c9abfbde3
Reject on DKIM PERMFAIL and SPF PERMFAIL as well
2024-01-14 09:19:04 +00:00
link2xt
95de87a325
Fixup rspamd disabled.conf deployment message
2024-01-14 08:45:39 +00:00
link2xt
5366df8dc6
Replace rspamd rule weights with a strict rule
2024-01-14 08:45:23 +00:00
link2xt
0a6db5161d
Remove unused _configure_opendkim
2024-01-12 19:05:23 +00:00
link2xt
62e25e44fd
Disable ratelimit module like other modules
2024-01-12 18:56:11 +00:00
link2xt
ce9fe920dc
Do not return anything from remove_opendkim()
2024-01-12 18:47:57 +00:00
link2xt
c171866faf
Actually disable phising, rbl and hfilter
2024-01-12 18:46:07 +00:00
missytake
7758c94e31
rspamd: remove redis (not needed)
2024-01-12 15:49:06 +00:00
missytake
66debb9245
lint fixes, final touch
2024-01-12 15:49:06 +00:00
missytake
3542232393
rspamd: reject emails with invalid SPF, DKIM, DMARC
2024-01-12 15:49:06 +00:00
missytake
536c12d989
tests: use generic recipient for DKIM testing
2024-01-12 15:49:06 +00:00
missytake
265403e110
revert "Significantly lower ratelimit"
2024-01-12 15:49:01 +00:00
missytake
fd679af577
rspamd: generate DKIM keys with rspamadm
2024-01-12 15:47:36 +00:00
missytake
ecbf135549
rspamd: install rspamd + redis
2024-01-12 15:47:36 +00:00
missytake
7b90b936dd
tests: add test for rejecting SPF & DMARC fails
2024-01-12 15:47:36 +00:00
missytake
17a919ee53
lint: fix 3 issues
2024-01-12 15:47:36 +00:00
missytake
1b15ec0eae
rspamd: Significantly lower ratelimit; without read receipts this should be more than fine
2024-01-12 15:47:36 +00:00
missytake
bf863f05b6
rspamd: add redis-server for caching
2024-01-12 15:47:36 +00:00
missytake
a2316beab1
rspamd: disable RBL checks
2024-01-12 15:47:36 +00:00
missytake
28fc91f5f3
rspamd: add rate limiting
2024-01-12 15:47:36 +00:00
missytake
67062677b0
disable some unnecessary rspamd modules
2024-01-12 15:47:36 +00:00
missytake
faf8ffe678
do DKIM signing with rspamd instead of openDKIM
2024-01-12 15:47:36 +00:00
missytake
5821098699
DNS: added www subdomain to zonefile
2024-01-12 13:34:23 +00:00
link2xt
542d63888a
nginx: redirect www. to non-www
2024-01-12 13:34:23 +00:00
link2xt
449f8a014c
Fix indentation in nginx.conf.j2
2024-01-12 13:34:23 +00:00
link2xt
57764d0cf5
dns: require www. subdomain and request TLS certificate for it
2024-01-12 13:34:23 +00:00
link2xt
c39a79e26a
dns: check mta-sts CNAME directly without resolving to IP
2024-01-12 13:34:23 +00:00
link2xt
b6622fc68e
chore: run scripts/cmdeploy fmt
2024-01-12 12:18:28 +00:00
missytake
bcc54602ee
postfix: cleanup submission headers
2024-01-05 12:13:31 +01:00
missytake
f9998d5721
tests: if sender's public IP address is in the Received header
2024-01-05 12:13:31 +01:00
nudeldudel
8605ceba5e
Update master.cf.j2
...
Add submission-header-cleanup to reduce the meta-data
2024-01-05 12:13:31 +01:00
link2xt
70b0e9d5e5
postfix: increase compatibility_level to 3.6
2023-12-27 00:29:12 +01:00
missytake
fdd533aa3b
acmetool: stop nginx so acmetool-redirector can start
2023-12-25 23:45:40 +01:00
link2xt
a44ed0aeb3
Use dig +short option to simplify DNS parsing
...
Without this option parsing of answer was flaky
as for long records like
_submission._tcp.nine.testrun.org.
dig printed the result with a space rather
than tab as a separator and .split("\t") did not work.
This change makes the `dig` command print the answer
in the form we need so there is no need for complex parsing
other than taking the first line.
`-r` option is added to make sure options are not changed by .digrc
in the root home directory.
2023-12-22 21:49:12 +00:00
link2xt
f5bfa6bd56
test: test scanning QR code
2023-12-21 22:22:38 +00:00
link2xt
81a6f8808b
fix: escape login and password when passed from dovecot to doveauth
...
This should allow to use / in the password
2023-12-21 22:22:38 +00:00
missytake
46d5dbb07d
DNS: nicer output for reverse DNS/PTR records. fixes #143
2023-12-20 19:26:50 +01:00
missytake
d2e0d1fecc
DNS: flush_zone before validating DNS entries. fixes #140
2023-12-20 19:26:50 +01:00
missytake
d333cfdd5a
lint: fix 1 issue
2023-12-20 19:26:50 +01:00
missytake
40a3a2cc86
tests: make test init work with reachable chatmail_domain
2023-12-20 19:26:50 +01:00
missytake
fe978a1971
DNS: increase SSH command's timeout to 10 seconds (the default)
2023-12-20 19:26:50 +01:00
missytake
b426c2e7ff
DNS: error if can't connect with SSH. fixes #144
2023-12-20 19:26:50 +01:00
missytake
b626464453
cmdeploy: fail init and run if SSH doesn't connect
2023-12-20 19:26:50 +01:00
missytake
76c3316f02
cmdeploy init: make output green if DNS is correct
2023-12-19 19:39:49 +01:00
missytake
a6a9406228
DNS: making CLI output slightly prettier
2023-12-19 19:39:49 +01:00
missytake
7921f5dd0b
DNS: fix some crashes in cmdeploy dns
2023-12-19 19:39:49 +01:00
missytake
39fc9d628f
cmdeploy: only run cmdeploy dns after cmdeploy run
2023-12-19 19:39:49 +01:00
link2xt
85a9183b61
Do not call show_dns with run args
2023-12-19 19:39:49 +01:00
missytake
36a4381484
DNS: use local dig if ssh fails
2023-12-19 19:39:49 +01:00
