... | ... | @@ -201,7 +201,12 @@ the upstream, see [LDAP docs](howto/ldap#maintainer-users-and-upstream) for deta |
|
|
|
|
|
## Monitoring and testing
|
|
|
|
|
|
To test delivery, make sure you have an `emailPassword` set
|
|
|
The Postfix server is monitored by Nagios, as with all servers in the
|
|
|
`publicmail` group. This only checks that the SMTP port is open. We do
|
|
|
not have end to end delivery monitoring just yet, that is part of the
|
|
|
[improve mail services milestone](https://gitlab.torproject.org/groups/tpo/tpa/-/milestones/4), specifically [issue 40494](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40494).
|
|
|
|
|
|
To test delivery manually, make sure you have an `emailPassword` set
|
|
|
(e.g. through [update.cgi](https://db.torproject.org/update.cgi)). Then you should be able to use the
|
|
|
[swaks](https://tracker.debian.org/swaks) to test delivery.
|
|
|
|
... | ... | @@ -224,10 +229,6 @@ server (if you want to bypass `ud-replicate` altogether, note that the |
|
|
change might be overwritten fairly quickly). Note that [other schemes
|
|
|
can be used as well](https://doc.dovecot.org/configuration_manual/authentication/password_schemes/).
|
|
|
|
|
|
We do not have end to end delivery monitoring just yet, that is part
|
|
|
of the [improve mail services milestone](https://gitlab.torproject.org/groups/tpo/tpa/-/milestones/4), specifically [issue
|
|
|
40494](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40494).
|
|
|
|
|
|
## Logs and metrics
|
|
|
|
|
|
The submission server is monitored like other mail servers that have
|
... | ... | @@ -237,7 +238,8 @@ dashboard](https://grafana.torproject.org/d/Ds5BxBYGk/postfix-mtail?orgId=1&var- |
|
|
|
|
|
Mail logs are in `/var/log/mail.log` and probably systemd
|
|
|
journals. They contain PII like IP addresses and usernames and are
|
|
|
regularly purged.
|
|
|
regularly purged. Mails are scanned by fail2ban to ban IP addresses
|
|
|
trying to bruteforce account passwords.
|
|
|
|
|
|
## Backups
|
|
|
|
... | ... | |