Page MenuHomePhabricator

Updating DNS records for Major Gifts subdomain (benefactors.wikimedia.org)
Closed, ResolvedPublic

Description

From @CCogdill_WMF

I have what I think is a straightforward Ops request: I need to update the DNS record for benefactors.wikimedia.org, the domain we use to send receipt emails for Major Gifts' events system. Trilogy is switching to a new ESP, so the records are changing.

Here are the details:

  1. Update SPF record:

a. Change the current TXT record forbenefactors.wikimedia.org from:
v=spf1 include:wikimedia.orginclude:jangomail.com ?all
to:
v=spf1 include:wikimedia.orginclude:spf.mandrillapp.com -all

  1. Add a new DKIM entry:

a. Add a TXT record for mandrill._domainkey.benefactors.wikimedia.org with the value:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;

b. The old TXT record for benefactors._domainkey.benefactors.wikimedia.org can be removed.

Event Timeline

Peachey88 renamed this task from New Ops request: updating DNS for Major Gifts domain Inbox x 24 hours x to Updating DNS records for Major Gifts subdomain (benefactors.wikimedia.org).Mar 26 2016, 8:49 AM
Peachey88 added projects: DNS, SRE.

Change 280637 had a related patch set uploaded (by Mschon):
update the DNS record for benefactors.wikimedia.org

https://gerrit.wikimedia.org/r/280637

Before I merge the patch above: is all of the outbound benefactors email stopped for the duration of this switch already? It seems like immediately changing the SPF from "jango ?all" to "mandrill -all" is going to cause SPF errors for any jango mail still being emitted, from the moment we merge the above...

Yes @BBlack, you're good to go. We aren't pushing any events right now so
the system is dormant.

Change 280637 merged by BBlack:
update the DNS record for benefactors.wikimedia.org

https://gerrit.wikimedia.org/r/280637