Commit graph

4 commits

Author SHA1 Message Date
8548050772
Remove dead DNS record: satisfactory.pez.sh (#7)
nuremberg-b (162.55.55.2) has been decommissioned, this record is stale.

Closes PESO-75
2026-03-28 21:37:26 +00:00
69f895c5cd
Remove bogus PTR records from Cloudflare forward zone (#6)
PTR record for 83.94.248.182 (copenhagen-a) incorrectly claimed to be
mail.pez.sh. PTR records in a forward DNS zone don't control actual
reverse DNS (that's managed by the ISP), and this record was misleading.

Also removed the mail-ptr record which had a similarly misplaced
in-addr.arpa reference in the forward zone.

Fixes PESO-76
2026-03-28 21:08:31 +00:00
b00791f1b1
Update SPF and tighten DMARC for poste.io (#5)
* update SPF record: replace protonmail with poste.io mail server

PESO-77

- replace include:_spf.protonmail.ch with ip4:167.235.134.154 and ip6:2a01:4f8:1c1e:9c53::1 (nuremberg-a / mail.pez.sh)
- tighten from ~all (softfail) to -all (hardfail)

* tighten DMARC policy from p=none to p=quarantine

PESO-78

- enforce DMARC with p=quarantine (failed messages get quarantined)
- add adkim=r and aspf=r for relaxed DKIM/SPF alignment
2026-03-28 20:46:50 +00:00
Rasmus Wejlgaard
737d6e0bc1 initial commit 2026-03-28 12:39:41 +00:00