Editing Wiki.tetrain.com Runbook (section)

=== 11.3 Test send, and the two false starts ===

Wrote a temporary maintenance script calling <code><nowiki>UserMailer::send()</nowiki></code> directly (the same code path a password-reset email uses), deleted after use.

'''Attempt 1''' — <code><nowiki>From: biswajit.tetra@gmail.com</nowiki></code> → relay returned <code><nowiki>250 OK</nowiki></code> (<code><nowiki>SEND OK</nowiki></code>) but the email never arrived. Diagnosed via DNS, not guessed:

<pre>
<nowiki>
dig +short TXT gmail.com          # "v=spf1 redirect=_spf.google.com" — only Google infra allowed
dig +short TXT _dmarc.gmail.com   # p=none; sp=quarantine
dig +short TXT spf.tetrain.com    # only server-relay(.1/.2)/indorama-relay.tetrain.com authorized
dig +short A mail.tetrain.com     # 139.84.171.188 — NOT one of the authorized relay hosts above
</nowiki>
</pre>

<code><nowiki>mail.tetrain.com</nowiki></code> is not in <code><nowiki>tetrain.com</nowiki></code>'s own SPF record, and the From address wasn't even on the <code><nowiki>tetrain.com</nowiki></code> domain — a message claiming to be from a personal Gmail address, relayed through an unrelated third-party server, reads as spoofing to the receiving side.

'''Attempt 2''' — <code><nowiki>From: wiki@tetrain.com</nowiki></code> (still via <code><nowiki>mail.tetrain.com</nowiki></code>) → also <code><nowiki>SEND OK</nowiki></code> at the relay, not independently confirmed delivered/undelivered (superseded by attempt 3 before checking).

'''Attempt 3 (fix)''' — client identified the real constraint directly: the From address must match the *authenticated* SMTP account itself, i.e. <code><nowiki>smtp_wiki@tetrain.com</nowiki></code>, not an arbitrary <code><nowiki>@tetrain.com</nowiki></code> address. Updated:

<pre>
<nowiki>
sed -i 's/$wgEmergencyContact = "biswajit.tetra@gmail.com";/$wgEmergencyContact = "smtp_wiki@tetrain.com";/' /var/www/wiki/LocalSettings.php
sed -i 's/$wgPasswordSender = "biswajit.tetra@gmail.com";/$wgPasswordSender = "smtp_wiki@tetrain.com";/' /var/www/wiki/LocalSettings.php
</nowiki>
</pre>

Re-ran the test with <code><nowiki>From: smtp_wiki@tetrain.com</nowiki></code> → <code><nowiki>SEND OK</nowiki></code>, and '''client confirmed actual receipt''' in their inbox. This is the live, working state.

'''Verify''' (if reproducing): <code><nowiki>$wgEmergencyContact</nowiki></code> / <code><nowiki>$wgPasswordSender</nowiki></code> in <code><nowiki>LocalSettings.php</nowiki></code> both read <code><nowiki>smtp_wiki@tetrain.com</nowiki></code>; a real password-reset or "email this user" send succeeds and arrives.

----