Work Party 2010 Q3 (focus on e-mail subsystem)
Offload spamassassin functionality
Let Dave O'Neill know what he should configure as the email address for this account (right now, it's him). An alias for the tech people responsible for managing OCLUG's email would be preferable to a single address.
Someone responsible for email contacts Dave and he'll pass along the admin password for OCLUG's Hosted CanIt realm.
Disable spam filtering and greylisting on Tux for email relayed via Hosted CanIt's MX machines.
Change MX records for oclug.on.ca and lists.oclug.on.ca to Hosted CanIt's server:
oclug.on.ca. 1d IN MX 10 oclug.on.ca.mf.canit.ca.
oclug.on.ca. 1d IN MX 20 oclug.on.ca.mg.canit.ca.\\\
You should avoid publishing MX records that point directly to your back-end mail server; such records will permit spammers to bypass Hosted CanIt completely.
* Firewall off port 25 from the rest of the world.
* Turn off SpamAssassin on Tux, and disable postgrey and other spam-filtering features.
Optimize mailing lists
Gather and document all mailing lists and e-mail addresses, such as Board, SysAdmins, etc.
Eliminate any unneeded lists