We'll need the following DNS entries: Zone file additions for `torproject.org`: ``` ; torproject.org @ 300 MX 1 storm.torproject.org. storm 300 TXT "v=spf1 include:spf.mandrillapp.com ?all" @ 300 A 106.187.101.184 storm 300 A 106.187.101.184 storm 300 AAAA 2400:8900::f03c:91ff:fe37:4662 ``` and the slave zone: ``` ; storm.torproject.org * 300 TXT "v=spf1 include:spf.mandrillapp.com ?all" mandrill._domainkey 300 TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;" @ 300 A 106.187.101.184 * 300 A 106.187.101.184 ``` Please accept my sincerest apologies for asking for a wildcard DNS entry. We will be able to remove the mandrill-related entries once the Sandstorm machine has been relocated to a TPO-controlled VM with a real Postfix server. For now, I'm lazy and I hate Postfix.