Roses are red,
violets are blue,
can’t be fucked to write this,
so lorem ipsum for you.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec porttitor ultrices leo, sed mattis dolor iaculis sed. Pellentesque et suscipit dolor. Suspendisse tincidunt tempor vulputate. Phasellus ultrices rutrum vehicula. Mauris elementum tincidunt dapibus. Nam accumsan nisi quis hendrerit cursus. Nulla felis lectus, mattis vitae felis et, ultricies interdum ex. Donec consequat risus et nunc sodales, vel pharetra ante pellentesque. Praesent at sodales sapien, ac semper ante. Nulla facilisi.
Sed pulvinar eu ipsum et malesuada. Proin in porttitor dolor. Fusce non risus magna. Mauris vehicula convallis tristique. Morbi faucibus nunc in velit tempus interdum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla aliquam venenatis nulla, tincidunt sollicitudin erat commodo blandit. Nulla sodales mollis nibh. Duis scelerisque posuere nulla sed egestas. Donec dui arcu, bibendum id risus eu, cursus interdum lectus. Aliquam interdum scelerisque risus eget aliquet.
TL;DR: Reworked my infrastructure at poolp.org, implemented folder pinning, worked on my webmail. poolp.org infrastructure rework # I decided to move my servers from online.net to vultr.com (affiliation link).
TL;DR: Worked on the OpenSMTPD 6.7 release; Did a lot of work on the new table API; Wrote several PoCs; WARNING:
Examples of code and configuration that appear in this article are here to help illustrate and explain development stages of my work.
TL;DR: Worked on my webmail; Did a bit of OpenSMTPD work; Webmail vs mutt # I started using console clients to read my mail back when I was a student in early 2000s, and I’ve been using mutt for as long as I can recall now. I installed various mail clients along the years, some with graphical interfaces such as thunderbird or sylpheed, others with a web interface such as nullWebmail, SquirrelMail, Roundcube, Mailpile or currently Rainloop. No matter which, I always end up falling back to mutt for most tasks.
TL;DR: - I took a break to deal with personal stuff - I'm taking a long break from OpenBSD for personal reasons - I may or may not have experienced COVID-19, who knows - resumed work on OpenSMTPD and other projects This is a weird report # This is a weird report.
TL;DR: - Qualys released an advisory for a bad, bad vulnerability - an MTA is a very bad software to have a vulnerability in - hole was plugged but that's not enough, similar bugs should be mitigated in the future - article discusses what could have prevented escalation despite the bug What happened ? # Qualys contacted by e-mail to tell me they found a vulnerability in OpenSMTPD and would send me the encrypted draft for advisory.
TL;DR: - brought back libasr to OpenSMTPD, it is no longer an external dependency - libtls-enabled OpenSMTPD is now a thing - documented filters and improved reporting No shiny feature this month, ungrateful work # OpenSMTPD has had quite a few features implemented since its latest major release. As we get closer and closer to the next major release, my work on new features will slow down to focus more on getting the release in shape.
TL;DR: - wrote, reworked and translated multiple articles this month - got some goodies ready for my patrons - lots of work in OpenSMTPD's grammar, documentation and filters protocol WARNING:
TL;DR: - SMTP is the way computers exchange e-mails - it is a decentralised protocol meaning that ANYONE can run a node and be independant - it is being centralised at companies that have a history of abuse - it is being centralised in a country that has a history of abuse Where did you read this already ? # In August, I published a small article titled “You should not run your mail server because mail is hard” which was basically my opinion on why people keep saying it is hard to run a mail server. Unexpectedly, the article became very popular, reached 100K reads and still gets hits and comments several months after publishing.
TL;DR: - greylisting is a sound idea - yet it is not really practical today - people tend to disable it or find work-arounds - SPF-aware greylisting makes greylisting usable again SMTP failures in a nutshell # SMTP is a fail-safe protocol which attempts very hard to ensure that messages do not get lost once they are in transit. Among the various mechanisms and requirements in place is the use of “Temporary Failures”.
TL;DR: - our CI was improved - a new OpenSMTPD release, 6.6.1p1 took place to deal with portable issues - multiple portability issues were adressed - new table API in the works - filter-rspamd and filter-senderscore were improved - filter-greylist proof-of-concept published - wrote 2 chapters for my book Got myself a pinebook pro # I got myself an arm64 pinebook pro: