[H-ANNOUNCE] humbug.org.au is operational again

Russell Stuart russell-humbug at stuart.id.au
Mon Apr 2 18:44:01 AEST 2018


TL;DR - humbug.org.au is back again after an outage.

Humbug.org.au undergone renovations.  All the changes are internal. 
Members should see very little difference.

The renovations were triggered major email providers (eg, microsoft,
google) black listing .humbug.org.au and/or excalibur's IP address,
which effectively disabled the mailing lists.  That in turn was caused
by spam being relayed by Excalibur either by the mailing lists or via
the few remaining member alias email addresses.  The changes needed
(described below) to tackle the spam problem were large, so lots of
other things were done at the same time:

- It is now running on Debian Stretch, and all packages have been
 
upgraded accordingly.

- humbug.org.au has x509 wildcard cert issued via letsencrypt.

- Email server now supports SMTP over SSL.

- Email server now implements DMARC http://dmarc.org.

- Email is only accepted from servers whose IP Address is reported by
  MaxMind GeoIP to be in Australia, Canada, New Zealand or the USA.
  These were the only countries that delivered valid email to use in
  the last 12 months.

- All member email aliases have been deleted.  Sorry if you were
  effected by this but there wasn't much choice.

- GET's to all humbug web sites redirect to https the 1st time you 
  access them.

- Humbug wiki will only accept account creation attempts from IP 
  address in Australia and New Zealand.  This is to prevent wiki
  spammers from DOS'ing us doing continuous login attempts, causing
  us to overshoot our CPU allowance which them makes our VPS provider
  shut us down.

- The web interface of the list servers only accept logins and
  subscription attempts from IP Addresses in Australia and New Zealand.

- People who have root access to the VM has been restricted to
  currently financial members only.



-- 
Regards,
Russell Stuart
http://www.humbug.org.au/RussellStuart



More information about the Announce mailing list