Page MenuHomePhabricator

Add security-team@wikimedia.org as recipient of any abuse@ emails
Closed, ResolvedPublic

Description

In T241078, the Security team was added as recipients for emails to abuse@wikimedia.org. Thanks for doing that!

We would now like to be notified when anything comes in to any abuse@ mailbox (e.g, abuse@wikimedia.org or anything someone might guess is our abuse@ address). So, to make sure that the Security team reacts (when appropriate) as quickly as possible to inbound abuse requests to ANY abuse mailbox, please add security-team@wikimedia.org as a recipient for all inbound abuse@* emails.

Thank you!

Event Timeline

Dsharpe renamed this task from Add security-team@wikimedia.org as recipient any abuse@ emails to Add security-team@wikimedia.org as recipient of any abuse@ emails.Jan 6 2020, 11:11 PM

The list of domains for which exim aliases files (like the i edited for wikimedia.org to add security@ previously) exist currently is:

benefactors.wikimedia.org
pr.wikimedia.org
wikimediafoundation.org
wikimedia.org
wikipedia.org
wikivoyage.org
wmflabs.org

all others should fall back to defaults configured in exim.

Looking at the "abuse" lines of the existing templates i see they all just go to "postmaster" (and wikimedia.org goes now to postmaster, security).

The main project domains exist as symlinks to the wikimediafoundation.org, so the following are identical to the former:

mediawiki.org
wikiquote.org
wikinews.org
wikibooks.org
wikidata.org
wikisource.org
wikiversity.org
wiktionary.org
w.wiki

finally, wikivoyage.de is linked to wikivoyage.org.

Others that exist in DNS and may or may not have https redirects do not have abuse@ email addresses. ex.

abuse@wikimedia.com is undeliverable: Address abuse@wikimedia.com does not exist

I added security-team@wikimedia.org to abuse@ for all of the above.

Dzahn claimed this task.

This should be it.. unless you are asking to add it even for things that never had working abuse@ in the past and are at best https redirects (like .com version of project names).