[Lugstuff] new stuff learned rebuilding Annapolislinux

Tue Jan 19 09:12:25 EST 2021

Hey Bob,

Mailman rejected it saying the message body was too big.

You should be able to send large messages now.

I removed the header size limitation in mailman.

-tjk

On 19/01/21 03:23 +0000, Annapolis Linux Users Group wrote:
>  Ted,
> Have tried several times today to send you a message - and it bounces each time.  Don't know if this one will bounce also.  Trying to send you a screenshot of your Web site as it appears on my computers.  The beautiful image and logo are  overshadowed by another text box that looks like nothing you intended.  Don't know how to get the image through to you.  Attaching it to my email seems to keep causing my message to bounce.  Could it be some setting on your mail server?
>    Bob
> 
>     On Monday, January 18, 2021, 8:04:28 PM EST, Annapolis Linux Users Group <lugstuff at annapolislinux.org> wrote:  
>  
>  Who is this email from ? 
> 
> I have Annapolis Linux setup to hide the identity of senders which makes
> it hard to tell who is who. This prevents people from getting spammed
> but it is pain. 
> 
> As an update, I now have all three layers setup.
>   1. SFP 
>   2. DKIM  - using OpenDKIM
>   3. DMARC - using opendmarc
> 
> All three of these layers seem just like hacks to me. 
> 
> Intrestingly, all of these require DNS records and mail server hooks.
> 
> I am no longer able to forge emails as I did in the past.
> 
> Of the two layers, setting up SFP and DMARC were the easier. 
> 
> Setting up DKIM is a bit troublesome becuase the public key in a DNS
> record can be a bit long and hard to get formatted. 
> 
> -tjk, discussion facilitator
> 
> 
> On 18/01/21 09:51 -0500, Annapolis Linux Users Group wrote:
> > Ted -
> > 
> > I would be very interested in a sessions on both the web server and the
> > email setup. I've read about the various email anti spam mechanisms, but
> > I've never implemented them. It would be great to get your actual
> > experience point of view.
> > 
> > On Mon, Jan 18, 2021, 12:07 AM Annapolis Linux Users Group <
> > lugstuff at annapolislinux.org> wrote:
> > 
> > > I learned a few new things rebuilding the site.
> > >
> > > I am starting to feel really thankful my previous provider booted me.
> > >
> > > Rebuilding the Annapolis Linux host was really good for refreshing my
> > > skills.
> > >
> > > I could probably do a mini presentation on one or two of the following:
> > >
> > > * Increasing your mailservers reputation using SFP, DKIM and TLS.
> > >  It seems mailservers get rated by the suplements they run. Maybe I
> > >  have this wrong. But, I added the following protocols to the server.
> > >
> > >  - TLS setup using the EFF Let's Encrypt
> > >
> > >  - SFP setup google and many mail servers require this to prevent your
> > >    email from going in the Junk box.
> > >        Here is my spf record from dig.
> > >
> > >        dig annapolislinux.org txt
> > >        annapolislinux.org.    1800    IN      TXT    "v=spf1
> > > ip4:96.126.117.237 ip6:2600:3c00::f03c:92ff:fe09:31dd ~all"
> > >
> > >  - OpenDKIM setup - this creates a digital signiture in the header.
> > >    A private RSA key is stored in a DNS text record. Lots of big servers
> > > require this for mail to go through.
> > >    When a mail is received on a server with DKIM setup, it will check
> > >    the DKIM header with the entry stored on the DNS to see if it is
> > >    valid. If it is not valid, it may get rejected or marked as SPAM.
> > >      http://www.opendkim.org/
> > >
> > >      Here is a cool web tool to check your setup.
> > >      https://dkimvalidator.com/
> > >
> > >  - Todo Setup DMARC
> > >
> > > * Setting up Let's Encrypt. Free SSL Certificates.
> > >  EFF sponsors Let's Encrypt.
> > >  Let's Encrypt provides free SSL certificates with a short life.
> > >  These certificiates can be used be renewed automatically via a script.
> > >  Certbot is the mechanism to install the packages.
> > >  https://letsencrypt.org/
> > >
> > > * Troubleshooting Apache and Mailman
> > >  Mainly, running Apache in debug mode will prety much tell you why
> > >  apache is not working.
> > >
> > > * Setting up Dovecot IMAP with Postfix.
> > >
> > > Is anyone interested ?
> > >
> > > -tjk
> > > Annapolis Linux Users Group
> > > _______________________________________________
> > > Lugstuff mailing list
> > > Lugstuff at annapolislinux.org
> > > http://annapolislinux.org/mailman/listinfo/lugstuff
> > >
> 
> > _______________________________________________
> > Lugstuff mailing list
> > Lugstuff at annapolislinux.org
> > http://annapolislinux.org/mailman/listinfo/lugstuff
> 
> _______________________________________________
> Lugstuff mailing list
> Lugstuff at annapolislinux.org
> http://annapolislinux.org/mailman/listinfo/lugstuff
>   

> _______________________________________________
> Lugstuff mailing list
> Lugstuff at annapolislinux.org
> http://annapolislinux.org/mailman/listinfo/lugstuff