[ww-devel] help moving bugzilla to new MAA server

Sun Feb 2 14:09:20 EST 2020

Thanks Tani.  I’ll take a look at that.

Take care,

Mike

> On Feb 2, 2020, at 1:39 PM, Nathan Wallach <taniwallach at gmail.com> wrote:
> 
> 
> I'm not an expert in postfix configuration, but over the years there have been changes in how mail is handled. Two of the key things to allowing mails to be handled properly nowadays are:
> SPF (Sender Policy Framework)  
> https://www.spf-record.com/syntax <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.spf-2Drecord.com_syntax&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=ZSnI7K9s9wosHTLFOSsZiX2BPsPVWQP_8lABG5OYc7Q&e=>
> https://en.wikipedia.org/wiki/Sender_Policy_Framework <https://urldefense.proofpoint.com/v2/url?u=https-3A__en.wikipedia.org_wiki_Sender-5FPolicy-5FFramework&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=usA6ArDmiE1tbKmTNhmYZNaJy3kuREK_vxL7uZMQwKU&e=>
> DKIM (if needed)
> At some point I needed to get SPF set up for a server of mine, as without it many systems (such as Gmail) begin rejecting mails it was sending.  SPF essentially is an addition to the DNS records indicating what addresses can send email in the name of the server.
> 
> webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=> does seem to have an SPF record:
> webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=> text = "v=spf1 a ~all"
> stating, if I understand it, that "a" = the public IP address via "A" record of webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=> can send mails on behalf of webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=>, and "~all" no other address can.
> The main maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=SPOIpOsTveeKQZDn8ZIptsvJFmrmzT3p9UptgLOoa28&e=> domain also has an SPF record (a more complicated one), but test1.webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__test1.webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=Tg6so3pyfwOKMGSw4vH3eOBfw-5OWvn7eqtdbNed1Yc&e=> does not have any SPF record.
> 
> tani at lxtani:~$ nslookup -type=txt webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=>
> Server: 192.168.1.1
> Address: 192.168.1.1#53
> 
> Non-authoritative answer:
> webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=> text = "v=spf1 a ~all"
> 
> Authoritative answers can be found from:
> 
> tani at lxtani:~$ nslookup -type=txt test1.webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__test1.webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=Tg6so3pyfwOKMGSw4vH3eOBfw-5OWvn7eqtdbNed1Yc&e=>
> Server: 192.168.1.1
> Address: 192.168.1.1#53
> 
> Non-authoritative answer:
> *** Can't find test1.webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__test1.webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=Tg6so3pyfwOKMGSw4vH3eOBfw-5OWvn7eqtdbNed1Yc&e=>: No answer
> 
> Authoritative answers can be found from:
> maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=SPOIpOsTveeKQZDn8ZIptsvJFmrmzT3p9UptgLOoa28&e=>
> origin = roxy.ns.cloudflare.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__roxy.ns.cloudflare.com&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=25fmgBuhcTZjNTStrGMax8t50-GTQKbSpENRJs2AqaQ&e=>
> mail addr = dns.cloudflare.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__dns.cloudflare.com&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=R3UbxmyhtPTD1z_yyczVM5AQkT__HQODWP2ALDTVwFI&e=>
> serial = 2032525634
> refresh = 10000
> retry = 2400
> expire = 604800
> minimum = 3600
> 
> tani at lxtani:~$ nslookup -type=txt maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=SPOIpOsTveeKQZDn8ZIptsvJFmrmzT3p9UptgLOoa28&e=>
> Server: 192.168.1.1
> Address: 192.168.1.1#53
> 
> Non-authoritative answer:
> maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=SPOIpOsTveeKQZDn8ZIptsvJFmrmzT3p9UptgLOoa28&e=> text = "v=spf1 include:_spf.google.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__spf.google.com&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=wuIwm5s1JcGHcUFY3ocG8OdpzTQJ-kIYc8o4iczpyyk&e=> ~all"
> maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=SPOIpOsTveeKQZDn8ZIptsvJFmrmzT3p9UptgLOoa28&e=> text = "v=spf1 include:mailgun.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__mailgun.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=1nJPqqwoPUUt8bRXBQs22_k1gIDjV6kgHunFAD4vGgk&e=> include:e2ma.net <https://urldefense.proofpoint.com/v2/url?u=http-3A__e2ma.net&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=tytEKJqGVRtIOU7zMOzfGYyegKbL89UtC-xGrJ_0dnM&e=> ~all"
> maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=SPOIpOsTveeKQZDn8ZIptsvJFmrmzT3p9UptgLOoa28&e=> text = "v=spf1 include:mailgun.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__mailgun.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=1nJPqqwoPUUt8bRXBQs22_k1gIDjV6kgHunFAD4vGgk&e=> ~all"
> 
> Authoritative answers can be found from:
> 
> 
> 
> 
> On Sun, Feb 2, 2020 at 7:45 PM mgage <gage at math.rochester.edu <mailto:gage at math.rochester.edu>> wrote:
> Hi all,
> 
> We’re in the process of moving the wiki (mediawiki), the moodle forums, and bugzilla to a new MAA server.  The old MAA server at webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=b1p-Kxz_hcQcS_mC2Alau0e5WTBS9rmMCkNDFxuUh40&e=> is going away
> as of the end of February.
> 
> The new server is currently at https://test1.webwork.maa.org <https://urldefense.proofpoint.com/v2/url?u=https-3A__test1.webwork.maa.org&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=TS3BqYeq0fHPJ8Y2n6NLx3I3tazCRXOAnLWIlDw2s1k&e=>   (and doesn’t have external certificates at the moment so you will be advised of danger).
> I’m hoping that simon park will be able to tell me how to install certificates that prevent these warnings. 
> 
> I need help testing all three applications — particularly with logins. 
> 
> 1. Old logins for mediawiki should work, but new ones may or may not be created. ??
> 2. logins for the moodle forum are completely problematic — I’m not sure which ones work and don’t work
> 3. logins for bugzilla should work, new logins appear to send off a confirmation email but it never arrives.
> 
> 
> MAIL
> sending mail via postfix appears to work but the mail never arrives.  I could use some help from those familiar with 
> troubleshooting the configuration of postfix.  I am not getting any obvious errors. !!!!! 
> 
> I think this postfix mail problem is central to several other problems. 
> 
> With many eyes on these problems I’m hoping to get everything transferred to the new server.   The applications listed hadn’t 
> been updated in at least eight years which added to the difficulty of transferring and updating them.
> 
> Take care,
> 
> Mike
> 
> 
> 
> _______________________________________________
> webwork-devel mailing list
> webwork-devel at webwork.maa.org <mailto:webwork-devel at webwork.maa.org>
> http://webwork.maa.org/mailman/listinfo/webwork-devel <https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org_mailman_listinfo_webwork-2Ddevel&d=DwMFaQ&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=l2SOJw7U7WqFIQmP9gpo5Fdg2y3E4Ie6vpDZocTY14s&e=>
> _______________________________________________
> webwork-devel mailing list
> webwork-devel at webwork.maa.org
> https://urldefense.proofpoint.com/v2/url?u=http-3A__webwork.maa.org_mailman_listinfo_webwork-2Ddevel&d=DwICAg&c=kbmfwr1Yojg42sGEpaQh5ofMHBeTl9EI2eaqQZhHbOU&r=C6Pt5AGtImanmAdcooarL-JZO8M5dSFPfs3VweYXYkE&m=EwUaqw7SmQ_h3BOILHHUoQzQ5P5uM_4cmI6YYBTOFHI&s=l2SOJw7U7WqFIQmP9gpo5Fdg2y3E4Ie6vpDZocTY14s&e= 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://webwork.maa.org/pipermail/webwork-devel/attachments/20200202/d9b7d610/attachment-0001.html>