I added the SRE tag but I'm not sure how this should be routed. Can anyone from SRE give guidance on how to adjust this task so the right people see it?

Sidenote: In the description, I've removed my speculation about how I think it works (based on trying to connect-the-dots according to what I've been told), because I'm not certain.

Hi,

Per our git repo where these email aliases are currently maintained, both donate@wikimedia.org and donations@wikimedia.org exist and are alias for fundraising@wikimedia.org. So they should be able to be used interchangeably as far as we are concerned.

jrobell changed the visibility from "Public (No Login Required)" to "All Users".

@jrobell: Please don't do this; anyone can create an account anyway. Thanks!

Since T128647 back in 2016, all fundraising related aliases should have been moved over to OIT (now ITS). See details from T128647#2087211 ff how Google groups were created for this on ITS side.

But then there was this comment T128647#2087287 and that is why that part was never moved until today, years later.

We would very much like to move that part to ITS/Google/FR as well if we can (understandably not right now in the middle of fundraiser).

That being said, as Alexandros already stated above, donation@ donate@ and donations@ are all aliases for fundraising@ and that is under the control of ITS.

fundraising@wikimedia.org
    <-- donation@wikimedia.org
  router = ldap_account, transport = remote_smtp
  host aspmx.l.google.com [209.85.201.26]

fundraising@wikimedia.org
    <-- donate@wikimedia.org
  router = ldap_account, transport = remote_smtp
  host aspmx.l.google.com [173.194.204.27]

fundraising@wikimedia.org
    <-- donations@wikimedia.org
  router = ldap_account, transport = remote_smtp
  host aspmx.l.google.com [173.194.68.27]

There is no difference between them from our side. And this has not been touched in a long time.

What has changed much more recently though is the OTRS/VRT side though.

However, the donor was sent to donations@ (rather than donate@ or fundraising@),

This and the part that they are identical on our side makes me think it could be in the configuration of the fundraising@wikimedia.org Google group/inbox. Are these 3 variations configured there as aliases or possible sender addreseses somewhere? is one of them missing?

cc @HMarcus from ITS . Harry, maybe do you have access/insight related to that Google mailbox config?

Hi all - fundraising@wikimedia.org is a delegated inbox in our domain. Meaning it acts like a normal user account, but we have granted delegate access to other users, so they can access this mailbox and "send as" when needed. It's possible there are custom email forwarding configurations set up in this inbox. Here is a list of the delegates:

gam user fundraising@wikimedia.org print delegates 
Getting delegates for fundraising@wikimedia.org (1/1)
User,delegateAddress,delegationStatus
mhernandez@wikimedia.org,accepted
ylavappa@wikimedia.org,accepted
krobinson@wikimedia.org,accepted
amjohnson@wikimedia.org,accepted
avalkov@wikimedia.org,accepted
shust@wikimedia.org,accepted
lpapadimitriou@wikimedia.org,accepted
mbeattie@wikimedia.org,accepted
khaggard@wikimedia.org,accepted
sinaba@wikimedia.org,accepted
rkumar@wikimedia.org,accepted
khancock@wikimedia.org,accepted
tgorski@wikimedia.org,accepted
lwadleigh-ctr@wikimedia.org,accepted

Any of the above users should be able to access this inbox and confirm if there are any custom forwarding settings applied. donations@wikimedia.org is another delegated inbox here, though there is only one assigned delegate - James Alexander, who hasn't been at the Foundation for years. Hope this helps.

Thank you for the detailed and quick response @HMarcus I'll leave the personal access part to fundraising but I can confirm that where it says James Alexander there should nowadays be someone else.

added fundraising-tech-ops

The problem described by the task (that is forwards from VRTS to donate@ failing) has been resolved. There was a configuration discrepancy in VRTS, namely the sender address of those forwards was not added as a System Address in VRTS. This has been fixed, validated and even a backlog of 1 month has been retried and sent to donate@. We are not sure when it was introduced or how as we don't have auditing capabilities there.

I am inclined to resolve this task, but I think there might be a followup action item here. That is the handover of donate@, donations@ and donation@ to ITS which was stalled back in T128647#2087287, but we might want to complete it now. From my PoV, For efficiency purposes it probably makes sense for those alias to be managed by the same system and team as the email address they point to (fundraising@) thus removing a dependency on a 3rd team. @jrobell, @krobinson, @HMarcus what do you think?

Of course if it is to happen, it should happen after the big fundraising is done and tracked in different task/ticket.

Thanks @akosiaris - this part is indeed solved!

I also agree that it makes sense to hand these all over to ITS, if that is possible to action that in Q3. We are actually planning to streamline all of the inboxes as we have issues with forwards from fundraising@ to Zendesk, so this could be part of the same Q3 project.

I also had one clarifying question for @HMarcus : Do I understand correctly that donations@ is its own delegated inbox and not an alias of fundraising@?

If it is its own delegated inbox, people on Donor Relations would definitely need access to it, as many genuine donor inquiries get caught up as spam in fundraising@ so we regularly check the spam folder. The same may be happening with donations@. Could you give me access and then I'll be able to have a dig around and see if further people on the team should also have access. Thank you!

Thank you very much @akosiaris and @krobinson would love to move those over to ITS as its part of an epic task (to move all the aliases outside of SRE itself more or less) I have had assigned to me for years. Also great to hear it's fixed on the VRTS side!

In T297307#7574634, @akosiaris wrote:

I am inclined to resolve this task, but I think there might be a followup action item here. That is the handover of donate@, donations@ and donation@ to ITS

I made T297915 for this.

P.S. Since you are all here. There is also open ticket T252932 which is called "Forwarding or alias for fundraising@" and you can see my comments on it. But I am not sure if that can be closed or not. It's from October 2020 though.

In T297307#7576437, @Dzahn wrote:

In T297307#7574634, @akosiaris wrote:

I am inclined to resolve this task, but I think there might be a followup action item here. That is the handover of donate@, donations@ and donation@ to ITS

I made T297915 for this.

Thanks!

In T297307#7576463, @Dzahn wrote:

P.S. Since you are all here. There is also open ticket T252932 which is called "Forwarding or alias for fundraising@" and you can see my comments on it. But I am not sure if that can be closed or not. It's from October 2020 though.

Looks to me like what the task subject is about has been resolved. The 1 actionable from it seems a duplicate of T252932, so let's resolve it and rely on the new task to finalize this next quarter?

Ok, thanks! Done. I merged the tickets into one.