justin/new-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

mail: dedicate fresh IP .90 (mta01) to filings subdomain for clean reputation

Browse source 
Added a fresh sending IP (.90/mta01) bound to the filings cold-outreach stream,
isolated from the reputation-damaged .94 trucking IP:
- .90 bound on ens18, persisted 3 ways (interfaces up/down hooks + pw-mail-ips
  service + watchdog cron, all updated for the Jun-24-outage safety pattern)
- postfix 'outfilings' transport binds .90 / HELO mta01
- sender_dependent_default_transport_maps routes @filings.* -> outfilings; moved
  the randmap:{out05:} catch-all to default_transport=out05 so the sender map
  can win (recipient transport_maps outranks it otherwise)
- filings SPF updated to include .90

TEST RESULT: fresh IP fixed the reputation signal (Gmail error changed from
'low domain reputation' on .94 to 'likely unsolicited' cold-start on .90).
Non-Google (GMX/Microsoft) deliver fine; Gmail cold-start remains a slow wall.
Plan: CT campaign to non-Google first, warm .90, trickle Gmail over weeks.
This commit is contained in:
justin 2026-07-01 00:11:07 -05:00
parent cd374047da
commit 5d9306b75c
2 changed files with 52 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
infra/network/interfaces
View file

@ -22,6 +22,18 @@ iface ens18 inet static
# (one IP at a time, days apart, only after Postmaster Tools shows green).
address 207.174.124.94/23
address 207.174.124.107/23
address 207.174.124.90/23 # filings subdomain (mta01) - fresh-reputation cold stream
# Secondary IPs: classic ifupdown only applies the FIRST address line, so
# bring these up explicitly (survives reboot; the bare address lines above
# are kept as documentation + for ifupdown2 compatibility).
up ip addr add 207.174.124.72/23 dev $IFACE || true
up ip addr add 207.174.124.94/23 dev $IFACE || true
up ip addr add 207.174.124.107/23 dev $IFACE || true
up ip addr add 207.174.124.90/23 dev $IFACE || true
down ip addr del 207.174.124.72/23 dev $IFACE || true
down ip addr del 207.174.124.94/23 dev $IFACE || true
down ip addr del 207.174.124.107/23 dev $IFACE || true
down ip addr del 207.174.124.90/23 dev $IFACE || true
gateway 207.174.124.1
# dns-* options are implemented by the resolvconf package, if installed
dns-nameservers 8.8.8.8 8.8.4.4