Set SPF record to new CARP IP
Open, HighPublic
Actions

Assigned To

Authored By

	dereckson
	Sat, Aug 22, 13:05

Description

I've created a new mailbox to manage potential partnerships.

I've noticed mail is considered as SOFTFAIL because we changed two different ways the routing:

before OSPF, Hervil used a DIRECT connection for SMTP traffic
default router was router-001 (51.255.124.8), it's now router-002/-003 (51.68.252.230)

In roles/dns/knot/files/zones/nasqueron.org.zone we've:

nasqueron.org. 86400 IN SPF "v=spf1 +mx +ip4:51.255.124.8 +ip6:2001:41d0:303:d971:0:0:517e:c0de ?ptr ~all"

Mail current SPF status: SOFTFAIL with IP 51.68.252.230

We should either:

Allow mail traffic to directly be sent by Hervil (+mx block already in SPF record)
Update record to also include the new VIP address

rOPS Nasqueron Operations
	D4188	rOPS7d730fd7df0a Set SPF record to new CARP IP

		Status	Subtype	Assigned	Task
		Open		ptdradmin	T2347 PARTENERIAT AVEC STUD'IN
		Open		dereckson	T2348 Set SPF record to new CARP IP

dereckson triaged this task as Normal priority.Sat, Aug 22, 13:05

dereckson created this task.

dereckson raised the priority of this task from Normal to High.Sat, Aug 22, 13:30

dereckson updated the task description. (Show Details)

Best short-term solution, to allow mail from Docker services too, is to allow the new router IP.

We also need to document what to do when we create a new router.