@recaptime-dev's working patches + fork for Phorge, a community fork of Phabricator. (Upstream dev and stable branches are at upstream/main and upstream/stable respectively.)
hq.recaptime.dev/wiki/Phorge
phorge
phabricator
Document Mailgun as discouraged, and update Postmark remote address blocks
Summary:
Ref T13669. See that task for discussion. Based on a disheartening interaction in June 2020, discourage use of Mailgun.
Also update the default Postmark inbound address list, since they've added a new address.
Test Plan: Read documentation, grepped for "mailgun".
Maniphest Tasks: T13669
Differential Revision: https://secure.phabricator.com/D21738
+26
-17
+2
-1
src/applications/metamta/adapter/PhabricatorMailPostmarkAdapter.php
+2
-1
src/applications/metamta/adapter/PhabricatorMailPostmarkAdapter.php
···
33
33
//
34
34
// "Configuring Outbound Email" should be updated if this changes.
35
35
//
36
-
// These addresses were last updated in January 2019.
36
+
// These addresses were last updated in December 2021.
37
37
'50.31.156.6/32',
38
38
'50.31.156.77/32',
39
39
'18.217.206.57/32',
40
+
'3.134.147.250/32',
40
41
),
41
42
);
42
43
}
+4
-1
src/docs/user/configuration/configuring_inbound_email.diviner
+4
-1
src/docs/user/configuration/configuring_inbound_email.diviner
···
42
42
43
43
| Receive Mail With | Setup | Cost | Notes |
44
44
|--------|-------|------|-------|
45
-
| Mailgun | Easy | Cheap | Recommended |
46
45
| Postmark | Easy | Cheap | Recommended |
47
46
| SendGrid | Easy | Cheap | |
47
+
| Mailgun | Easy | Cheap | Discouraged |
48
48
| Local MTA | Difficult | Free | Discouraged |
49
49
50
50
The remainder of this document walks through configuring Phabricator to
···
183
183
example domain with your actual domain.
184
184
- Configure a mailer in `cluster.mailers` with your Mailgun API key.
185
185
186
+
Use of Mailgun is discouraged because of concerns that they may not be a
187
+
trustworthy custodian of sensitive data. See <https://phurl.io/u/mailgun> for
188
+
discussion and context.
186
189
187
190
Postmark Setup
188
191
==============
+20
-15
src/docs/user/configuration/configuring_outbound_email.diviner
+20
-15
src/docs/user/configuration/configuring_outbound_email.diviner
···
17
17
| Send Mail With | Setup | Cost | Inbound | Media | Notes |
18
18
|----------------|-------|------|---------|-------|-------|
19
19
| Postmark | Easy | Cheap | Yes | Email | Recommended |
20
-
| Mailgun | Easy | Cheap | Yes | Email | Recommended |
21
20
| Amazon SES | Easy | Cheap | No | Email | |
22
21
| SendGrid | Medium | Cheap | Yes | Email | |
23
22
| Twilio | Easy | Cheap | No | SMS | Recommended |
···
26
25
| Local SMTP | Hard | Free | No | Email | sendmail, postfix, etc |
27
26
| Custom | Hard | Free | No | All | Write a custom mailer. |
28
27
| Drop in a Hole | Easy | Free | No | All | Drops mail in a deep, dark hole. |
28
+
| Mailgun | Easy | Cheap | Yes | Email | Discouraged |
29
29
30
30
See below for details on how to select and configure mail delivery for each
31
31
mailer.
32
32
33
-
For email, Postmark or Mailgun are recommended because they make it easy to
34
-
set up inbound and outbound mail and have good track records in our production
35
-
services. Other services will also generally work well, but they may be more
36
-
difficult to set up.
33
+
For email, Postmark is recommended because it makes it easy to set up inbound
34
+
and outbound mail and has a good track record in our production services. Other
35
+
services will also generally work well, but they may be more difficult to set
36
+
up.
37
37
38
38
For SMS, Twilio or SNS are recommended. They're also your only upstream
39
39
options.
···
87
87
```lang=json
88
88
[
89
89
{
90
-
"key": "mycompany-mailgun",
91
-
"type": "mailgun",
90
+
"key": "mycompany-postmark",
91
+
"type": "postmark",
92
92
"options": {
93
93
"domain": "mycompany.com",
94
94
"api-key": "..."
···
118
118
119
119
The `type` field can be used to select these mailer services:
120
120
121
-
- `mailgun`: Use Mailgun.
122
121
- `ses`: Use Amazon SES.
123
122
- `sendgrid`: Use SendGrid.
124
123
- `postmark`: Use Postmark.
125
124
- `twilio`: Use Twilio.
126
125
- `sns`: Use Amazon SNS.
126
+
- `mailgun`: Use Mailgun.
127
127
128
128
It also supports these local mailers:
129
129
···
204
204
[
205
205
"50.31.156.6/32",
206
206
"50.31.156.77/32",
207
-
"18.217.206.57/32"
207
+
"18.217.206.57/32",
208
+
"3.134.147.250/32"
208
209
]
209
210
```
210
211
211
-
The default address ranges were last updated in January 2019, and were
212
+
The default address ranges were last updated in December 2021, and were
212
213
documented at: <https://postmarkapp.com/support/article/800-ips-for-firewalls>
213
214
214
215
···
219
220
|---------|
220
221
| Inbound | Yes
221
222
|---------|
223
+
224
+
Use of Mailgun is discouraged because of concerns that they may not be a
225
+
trustworthy custodian of sensitive data. See <https://phurl.io/u/mailgun> for
226
+
discussion and context.
222
227
223
228
Mailgun is a third-party email delivery service. You can learn more at
224
229
<https://www.mailgun.com>. Mailgun is easy to configure and works well.
···
339
344
rules, blackholes, and MTA configuration which are beyond the scope of this
340
345
document. If you can already send outbound email from the command line or know
341
346
how to configure it, this option is straightforward. If you have no idea how to
342
-
do any of this, strongly consider using Postmark or Mailgun instead.
347
+
do any of this, strongly consider using Postmark instead.
343
348
344
349
To use this mailer, set `type` to `sendmail`, then configure these `options`:
345
350
···
416
421
next group.
417
422
418
423
For example, if you have two SMTP servers and you want to balance requests
419
-
between them and then fall back to Mailgun if both fail, configure priorities
424
+
between them and then fall back to Postmark if both fail, configure priorities
420
425
like this:
421
426
422
427
```lang=json
···
434
439
"options": "..."
435
440
},
436
441
{
437
-
"key": "mailgun-fallback",
438
-
"type": "mailgun",
442
+
"key": "postmark-fallback",
443
+
"type": "postmark",
439
444
"options": "..."
440
445
}
441
446
}
···
450
455
451
456
If it still hasn't sent the mail, Phabricator will try servers which are not
452
457
in any priority group, in the configured order. In this example there is
453
-
only one such server, so it will try to send via Mailgun.
458
+
only one such server, so it will try to send via Postmark.
454
459
455
460
456
461
Message-ID Headers