Custom Query (196 matches)

In order to prevent getting marked as spammers, we should possibly block outgoing port 25, so that users trying to send mail need to go through us (or an authenticated MTA elsewhere on port 587, which shouldn't cause spam reputation problems to us). This will increase the effectiveness of Postfix-level outgoing mail blockages, and would open up significant opportunities for our Postfix doing smart things like logging, rate-limiting, etc..

This was discussed:

• -c scripts -i trac-#406 on 12/19/14
• -c scripts-root -i p on 8/6/14
• -c scripts-root -i m on 9/9/14

At the moment, outgoing email from scripts is unreliable. Hopefully something like #357 could improve that. In the short term, and possibly even once #357 gets fixed, users may be better served by sending their email in other ways. We should ideally document some options.

The obvious option is to tell people to use Kerberized auth to outgoing.mit.edu. It's an obvious, MIT-run service that (hopefully) has good deliverability, and I believe any principal can auth. However, I think many languages have mediocre support for Kerberized SMTP, so it may be hard to for our users to do this.

There are also various companies that provide this sort of service. Some options are:

• SparkPost?, which supports both a ​custom API and SMTP and ​allows 10K emails/month for free
• SendGrid?, which also has ​an API and SMTP support and ​seems to have a free 12K emails/month tier
• Mandrill/MailChimp?, which also has ​API/SMTP support, but appears to have a ​2K emails/account limit for the free trial, after which it's ​$10/month

These have the advantage of probably being easier to set up than kerberized outgoing.mit.edu and likely having better deliverability, but disadvantage of requiring a non-MIT party and having a lower free message cap (I think MIT is effectively 1K/day so ~30K/month).

Doing this primarily to see if my patches work.