package: developers-reference severity: wishlist ----- Forwarded message from "Adam D. Barratt" <a...@adam-barratt.org.uk> -----
Date: Tue, 22 Oct 2019 05:59:08 +0100 From: "Adam D. Barratt" <a...@adam-barratt.org.uk> To: debian-devel-annou...@lists.debian.org Subject: debian.org mail handling updates Message-ID: <21e81b9e413c3b7c36ba271adbcf400b3dffa512.ca...@adam-barratt.org.uk> [ TL;DR: the "default mail handling" option in LDAP now actually does something by default :) and additional optional checks are available. ] Hi, This mail summarises recent updates to @debian.org mail handling. All mail passing through the front-end mail servers is subject to a number of mandatory checks that help to ensure that Debian's resources are not overloaded. These mandatory checks include: - "nomail" and "noservers" RBLs from SORBS; - rate-limiting; - fail2ban rules; and - manually-curated blacklists. Additionally, there are a number of optional checks which may be controlled via your LDAP settings: - greylisting; - sender verification callouts; - RBLs / RHSBLs such as Spamhaus XBL or SORBS "relay" RBL; - malware scanning using clamav (with some unofficial signatures); and - checking of URLs within a message body against the SURBL and Spamhaus DBL. The "mail content inspection action" setting can be used to determine if the result of the final two checks should be to reject the mail, blackhole it or deliver it to you with the addition of a header indicating the issue. Enabling "default mail handling" indicates that you accept DSA's choices regarding @debian.org mail handling. In addition to the mandatory checks mentioned above, this currently means that the following optional checks are enabled: - greylisting; - Spamhaus XBL - SORBS "relay" RBL - Spamhaus DBL for sender address Finally, documentation on @debian.org mail handling can be found at https://db.debian.org/forward.html, whilst all of the configuration relating to "default mail handing" comes from DSA's Puppet repository, a mirror of which can be found on Salsa. DSA may alter the mandatory checks and/or the optional checks enabled by "default mail handling" as necessary. Adam wrangling exim on behalf of DSA ----- End forwarded message ----- -- cheers, Holger ------------------------------------------------------------------------------- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
signature.asc
Description: PGP signature
