<!DOCTYPE html><html><head><title></title><style type="text/css">
p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Hi folks<br></div><div><div><br></div><div><div><div>Tonight's progress ....<br></div></div><div><div><br></div><div><div>Script Changes and Checks<br></div></div><div>=========================<br></div></div><div><br></div><div>X Update email backup script - /etc/<a href="http://cron.daily/zzdailybackup">cron.daily/zzdailybackup</a> on mooneye<br></div><div><br></div><div>Cleanup and Tidyup<br></div><div>==================<br></div><div><br></div><div>X Test reboot of mailfish and check things come up cleanly<br></div><div>X Rerun ansible<br></div></div><div><br></div><div><br></div><div>Outstanding tasks ....<br></div></div><blockquote type="cite" id="qt" style=""><div><div>> <br></div><div>> Further Upgrades<br></div><div>> ================<br></div><div>> <br></div><div>> * Security upgrades for mailman<br></div></div></blockquote><div><br></div><div>Mark<br></div><div id="sig26513633"><div>--</div>
<div>Mark Tearle <<a href="mailto:mtearle@ucc.asn.au">mtearle@ucc.asn.au</a>></div></div><div><br></div><div><br></div><div>On Tue, 23 Jun 2020, at 12:08 AM, Mark Tearle wrote:<br></div><blockquote type="cite" id="qt" style=""><div>Hi folks<br></div><div><br></div><div>Tonight's progress ....<br></div><div><br></div><div>X Prometheus dashboards for postfix<br></div><div>X Record changes in ansible<br></div><div><br></div><div><br></div><div>On Sun, 21 Jun 2020, at 11:39 PM, Mark Tearle wrote:<br></div><div>> Hi folks <br></div><div>> <br></div><div>> X Update ucc hosts smarthost configurations<br></div><div>> <br></div><div>> Done - except for <br></div><div>> <br></div><div>> catfish.ucc.asn.au<br></div><div>> clownfish.ucc.asn.au<br></div><div>> cobra.ucc.asn.au<br></div><div>> meetings.ucc.asn.au<br></div><div>> mollitz.ucc.asn.au<br></div><div>> mylah.ucc.asn.au<br></div><div>> myxine.ucc.asn.au<br></div><div>> pinball.ucc.asn.au<br></div><div>> samurai.ucc.asn.au<br></div><div>> <br></div><div>> <br></div><div>> <br></div><div>> On Sun, 21 Jun 2020, at 1:17 AM, Mark Tearle wrote:<br></div><div>> > Hi folks<br></div><div>> > <br></div><div>> > I've mostly complete the cutover from mooneye to mailfish. My TODO<br></div><div>> > list is below (X = done, * = TODO). I think everything should be<br></div><div>> > working at the moment, but I've got some mop up work and configuration<br></div><div>> > to do tomorrow.<br></div><div>> > <br></div><div>> > There was a little scare in terms of config with a missing bit of IPv6<br></div><div>> > config in the postfix main.cf file. Hopefully mailman interpreted that<br></div><div>> > as a temporary failure and didn't bounce anybody off the lists.<br></div><div>> > <br></div><div>> > Apologies for the abundance of test emails, etc and to the poor<br></div><div>> > hostpersons who may have got lots of emails. Please forward any<br></div><div>> > anomalous emails through to me and I'll look at them (<a href="mailto:mark@tearle.com">mark@tearle.com</a> if<br></div><div>> > UCC email is broken)<br></div><div>> > <br></div><div>> > If there is something majorly borken, please call me on 0418 958 985 and<br></div><div>> > I'll look at it straight away. I'll do a cursory check in the morning,<br></div><div>> > but won't be at the computer until after midday.<br></div><div>> > <br></div><div>> > However, positive progress!<br></div><div>> > <br></div><div>> > Cheers,<br></div><div>> > Mark<br></div><div>> > <br></div><div>> > <br></div><div>> > Ansible<br></div><div>> > =======<br></div><div>> > <br></div><div>> > X Added cron entry to magic_lists for ucc-add-announce script<br></div><div>> > X Run ansible role again<br></div><div>> > X Check logic around /var/mail bind mount (see /home/other/mailman)<br></div><div>> > X Add start/stop for mailman and postfix to ansible role<br></div><div>> > X Add ucc-fw script<br></div><div>> > X Firewall http/https on mailfish to UCC only<br></div><div>> > X Run ansible role again<br></div><div>> > <br></div><div>> > Stop syncs<br></div><div>> > ==========<br></div><div>> > <br></div><div>> > X Force sync to mailfish<br></div><div>> > X Stop sync script from mooneye to mailfish<br></div><div>> > (Disable on mooneye, disable on mailfish)<br></div><div>> > <br></div><div>> > Stop processes<br></div><div>> > ==============<br></div><div>> > <br></div><div>> > X Check list holds/etc on mooneye/lists.ucc.*<br></div><div>> > X Check mailman qfiles empty on mooneye<br></div><div>> > X Check mail queues empty on mooneye<br></div><div>> > X Stop postfix on mooneye<br></div><div>> > X Stop mailman on mooneye<br></div><div>> > X Temporarily stop postfix and mailman on mailfish<br></div><div>> > <br></div><div>> > Configuration Changes<br></div><div>> > =====================<br></div><div>> > <br></div><div>> > X Move existing mooneye postfix config out of the way<br></div><div>> > <br></div><div>> > X Change mooneye postfix config to be a smarthost<br></div><div>> > X Remove mailman from mooneye /etc/init.d<br></div><div>> > X Update haproxy on mailauesi to point to mailfish<br></div><div>> > <br></div><div>> > Firewall Changes<br></div><div>> > ================<br></div><div>> > <br></div><div>> > X Update murasoi firewall rules<br></div><div>> > X - Change secure (.28) NAT rules for 465, 587, 588 to mailfish<br></div><div>> > X - Add (.9) NAT rules for 465, 587, 588, 25 to mailfish<br></div><div>> > X - Open firewall rules as needed for mailfish<br></div><div>> > <br></div><div>> > Web Changes<br></div><div>> > ===========<br></div><div>> > <br></div><div>> > X Add proxy for lists.ucc.* on mussel<br></div><div>> > X Add proxy for subscribe.ucc.* on mussel<br></div><div>> > <br></div><div>> > Config fixes<br></div><div>> > ============<br></div><div>> > <br></div><div>> > X mynetworks postfix main.cf for IPv6 localhost<br></div><div>> > X opendkim-internal add localhost<br></div><div>> > <br></div><div>> > DNS Changes<br></div><div>> > ===========<br></div><div>> > <br></div><div>> > X Update DNS for smarthost.mail.ucc.* to point to mailfish<br></div><div>> > X Leave DNS for mail.ucc.* to point to 130.95.13.9<br></div><div>> > X Leave DNS for mailhost.ucc.* to point to 131.95.13.9<br></div><div>> > <br></div><div>> > X Update DNS for lists.ucc.* to point to mussel, proxy to mailfish<br></div><div>> > X Update DNS for subscribe.ucc.* to point to mussel, proxy to mailfish<br></div><div>> > <br></div><div>> > * Update ucc hosts smarthost configurations<br></div><div>> > <br></div><div>> > Script Changes and Checks<br></div><div>> > =========================<br></div><div>> > <br></div><div>> > X Empty qfiles on mailfish<br></div><div>> > X Test policy systemhealth script on mailfish<br></div><div>> > X Start Mailman Qrunners on mailfish<br></div><div>> > X Check firewall on mailfish<br></div><div>> > X Update ucc-adduser-ad to not use ssh key and integrate mailman queue script<br></div><div>> > <br></div><div>> > * Update email backup script - /etc/<a href="http://cron.daily/zzdailybackup">cron.daily/zzdailybackup</a> on mooneye<br></div><div>> > <br></div><div>> > Cleanup and Tidyup<br></div><div>> > ==================<br></div><div>> > <br></div><div>> > X Email to <a href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a><br></div><div>> > * Test reboot of mailfish and check things come up cleanly<br></div><div>> > * Prometheus dashboards for postfix<br></div><div>> > * Record changes in ansible<br></div><div>> > * Rerun ansible<br></div><div>> > <br></div><div>> > Further Upgrades<br></div><div>> > ================<br></div><div>> > <br></div><div>> > * Security upgrades for mailman<br></div><div>> > _______________________________________________<br></div><div>> > List Archives: <a href="http://lists.ucc.asn.au/pipermail/tech">http://lists.ucc.asn.au/pipermail/tech</a><br></div><div>> > <br></div><div>> > Unsubscribe here: <br></div><div>> > <a href="https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au">https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au</a><br></div><div>> ><br></div><div>> _______________________________________________<br></div><div>> List Archives: <a href="http://lists.ucc.asn.au/pipermail/tech">http://lists.ucc.asn.au/pipermail/tech</a><br></div><div>> <br></div><div>> Unsubscribe here: <br></div><div>> <a href="https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au">https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au</a><br></div><div>><br></div><div>_______________________________________________<br></div><div>List Archives: <a href="http://lists.ucc.asn.au/pipermail/tech">http://lists.ucc.asn.au/pipermail/tech</a><br></div><div><br></div><div>Unsubscribe here: <a href="https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au">https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au</a><br></div><div><br></div></blockquote><div><br></div></body></html>