data.coop/ansible
8
3
Fork 7
Code Issues 49 Pull requests 9 Projects 1 Releases Wiki Activity

postfix -> mailu goes through external_services network #222

New issue
Open
opened 2024-10-29 12:15:51 +00:00 by reynir · 1 comment
reynir commented 2024-10-29 12:15:51 +00:00
Owner
Copy link

When our postfix (smtp.data.coop) tries to connect to mailu (mail.data.coop) it connects to our external ip as expected (according to its logs). However, mailu sees the sender IP being the gateway of our external_services network. This breaks SPF! And I don't understand why.

When our postfix (smtp.data.coop) tries to connect to mailu (mail.data.coop) it connects to our external ip as expected (according to its logs). However, mailu sees the sender IP being the **gateway** of our `external_services` network. This breaks SPF! And I don't understand why.
samsapti commented 2024-10-29 16:59:43 +00:00
Owner
Copy link

Hacky fix: Add a static subnet to the external_services network and add that IP range to the SPF record.

Lines 3 to 5 in fd2d2e0
- name: Set up external services network
docker_network:
name: external_services

Hacky fix: Add a static subnet to the `external_services` network and add that IP range to the SPF record. https://git.data.coop/data.coop/ansible/src/commit/fd2d2e025f95f8a914634e9323461d47f30fe369/roles/docker/tasks/services.yml#L3-L5
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
reynir-patch-1
proxmox
diun
use_sudo
woodpeckerci
linting
mailman
listmonk
sshd-password
No results found.
Labels
Clear labels   
Blocked

Something is blocking progress

  
Existing Service

Issues/improvements regarding existing services

  
Infrastructure Issue

Infrastructure issue that needs investigation or time to fix

  
Refactor

Refactoring of files / file structure or other improvements

  
Security Hardening

Non-verified / non-critical security improvements

  
Security Issue

Urgent security issue that needs to be fixed ASAP

  
Service Idea

Ideas for new services

  
Service Removal

Removal of services for one reason or another

  
Upgrade service
No labels
Blocked
Existing Service
Infrastructure Issue
Refactor
Security Hardening
Security Issue
Service Idea
Service Removal
Upgrade service
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: data.coop/ansible#222
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?