Activity

• Apply mailserver role to push D3553 to Postfix
• Start DKIM process
• Restart Postfix
• Validate DKIM is correctly used

What to look for?

• Mail logs: /var/log/maillog
• Grafana dashboard: https://grafana.nasqueron.org/d/h36Havfik/postfix-legacy-dashboard

Validation

• Can we validate external mails?
  • Send mail from gmail to Nasqueron
• Can we sign our mails?
  • Send mail from Nasqueron to gmail
    • Should contain the DKIM signature
    • DKIM signature should pass

If any of those two fails, rollback.

Rollback procedure

To rollback, it's enough to instruct Postfix not to use milter anymore.

• Revert D3553 on rOPS
• Reapply mailserver role
• Restart Postfix