Author | Lightnews

Reposted by Amitai Schleier

Amitai Schleier @schmonz.com · Sep 30

Got some slack time? Pick a risk to reduce.

Got no slack time? Defer something, then pick a cost to reduce.

#ContinuousImprovement

3 3

Amitai Schleier @schmonz.com · Sep 29

#SenderRewritingScheme with #notqmail via #pkgsrc:

echo srs.dom.ain > control/srs_domain
echo "$SECRET" > control/srs_secrets
echo srs.dom.ain >> control/rcpthosts
echo srs.dom.ain:srs >> control/virtualdomains
echo "| srsfilter" > alias/.qmail-srs-default

+ MX for srs.dom.ain

Amitai Schleier @schmonz.com · Sep 29

#qmail lacks #TLS. #notqmail doesn't include it either (yet!). But if you install from #pkgsrc…

# chown qmaild:nofiles control/servercert.pem
# chmod 640 control/servercert.pem
# ln -s control/servercert.pem control/clientcert.pem
# update_tmprsadh
# /etc/rc.d/qmail restart

🔐

1

Amitai Schleier @schmonz.com · Sep 29

For our next trick with #notqmail from #pkgsrc:

Want to SMTP-reject SPF failures when the source domain specifies explicit-fail?

1. Add SPP_SPF_RESULT_FAIL="E550 spf_smtp_msg" to
control/tcprules/smtp
2. Run "/etc/rc.d/qmailsmtpd cdb"
3. There is no 3rd thing, is that clear?

1

Amitai Schleier @schmonz.com · Sep 28

Another neat trick with #notqmail from #pkgsrc:

The default SMTP configuration rejects nonexistent recipients.

(qmail famously accepts all recipients for its domains even when those recipients don't exist, and then has to queue totally avoidable bounce messages. But you won't.)

1

Amitai Schleier @schmonz.com · Sep 28

Another #notqmail from #pkgsrc trick:

To enable #greylisting, simply uncomment "greylisting-spp-wrapper" in control/smtpplugins. That’s it.

(Add any exempt recipient addresses to control/greylist/exemptrcpts, or entire recipient domains to control/greylist/exemptrcpthosts.)

1

Amitai Schleier @schmonz.com · Sep 27

Running #notqmail via qmail-run from #pkgsrc? Cool. Add #DKIM signing like so, then publish a TXT record with your `default` policy. Done!

$# mkdir -p control/domainkeys/dom.ain # chown -R qmailr control/domainkeys # cd control/domainkeys/dom.ain # openssl genrsa -out default 1024 # chmod 640 default # openssl rsa -in default \ -pubout -out default.pub$

1 2

Amitai Schleier @schmonz.com · Sep 19

Most practical experts don’t write a book. Distinct tasks, incentives, skills.

For the same reasons, some published authors are better at describing than at enacting.

Maybe an author really knows, in context, under stress, how to *do* the thing. Maybe not.

#ExtremeProgramming

3

Reposted by Amitai Schleier

Amitai Schleier @schmonz.com · Sep 15

Unfortunately, even if the person following these steps loves #ExtremeProgramming (and is widely held to be expert in it), they’re no less destructive.

Amitai Schleier @schmonz.com · Sep 15

Hate #ExtremeProgramming and want others to hate it?

1. Become Director of Engineering

2. Tell org and stakeholders that XP will fix longstanding problems

3. Regularly interfere with devs’ learning

4. Design projects to delay ROI

5. Find scapegoats

Maybe they’ll blame #XP.

1 1

Amitai Schleier @schmonz.com · Sep 15

Unfortunately, even if the person following these steps loves #ExtremeProgramming (and is widely held to be expert in it), they’re no less destructive.

Amitai Schleier @schmonz.com · Sep 15

Hate #ExtremeProgramming and want others to hate it?

1. Become Director of Engineering

2. Tell org and stakeholders that XP will fix longstanding problems

3. Regularly interfere with devs’ learning

4. Design projects to delay ROI

5. Find scapegoats

Maybe they’ll blame #XP.

1 1

Amitai Schleier @schmonz.com · Sep 15

Hate #ExtremeProgramming and want others to hate it?

1. Become Director of Engineering

2. Tell org and stakeholders that XP will fix longstanding problems

3. Regularly interfere with devs’ learning

4. Design projects to delay ROI

5. Find scapegoats

Maybe they’ll blame #XP.

Amitai Schleier @schmonz.com · Sep 14