Just a record of changes for those of you who care about the infra:
* Updated postfix on lists to strip DKIM/ARC headers for incoming messages.
These get re-signed on the way out, and even when we have DKIM aligment
to the new sig, some things don't like the old sig not verifying.
* Updated mailman to always do DMARC From mitigation
This will ensure we have DKIM alignment
This also updated several lists that were doing Wrap based mitigation to
do From mitigation
* Updated SPF records
To remove unneeded rackspace IPs
* Updated our DMARC records
Added some missing fields, removed rua/ruf addresses we don't need,
added rua/ruf address for mailgun.
* Updated DNS for lists.linuxfests.org
Added an MX, rather than falling back to A record
There's more to come, we need to move to enforcing our SPF/DKIM/DMARC
policies, but I want to wait and make sure we're actually getting DMARC
alignment first.
--
Phil Dibowitz phil(a)ipom.com
Open Source software and tech docs Insanity Palace of Metallica
http://www.phildev.net/http://www.ipom.com/
"Be who you are and say what you feel, because those who mind don't
matter and those who matter don't mind."
- Dr. Seuss
