[tech] [wheel] Email security appliance migration for ucc.asn.au and ucc.guild.uwa.edu.au

[Nick Bannon]

Thanks, James!

Frankly, email comms is a core service and it's been painful to see
UWA de-prioritise it to an appliance; a service; and now an
off-premises appliance. When it was first installed we had some passable
visibility into the system, and we used to be able to see the length of
the queues when they gummed up under load.

Still, let's do our part and be involved in testing this
changeover; and also in rebuilding mooneye. Who else is keen
on spending some time on this in coming weeks?

It occurs to me - why the strict change window? Couldn't we start
using the new MX'es pretty much immediately?

Testing reveals... No. Connecting to them on port 25 currently
results in no response - one might expect an ESMTP banner.
(a la "telnet mooneye 25")

Nick.

On Wed, Dec 04, 2019 at 12:33:36PM +0800, James Arcus wrote:
> Hi Harshana,
> 
> Sorry for the delay getting back to you.
> 
> I'm currently checking with the rest of the team on some details, but we
> will definitely be available on 12 Dec to make the changes required on our
> end.
> 
> I would welcome the opportunity to jump into a call with you. I can be
> reached at [...], and am available any day of the week after 10 am
> at your convenience.
> 
> I see your lists of our mail domains includes ucc.asn.au and
> ucc.guild.uwa.edu.au. We also still have ucc.gu.uwa.edu.au configured and
> use it to receive mail. Will that need its own consideration as well?
> 
> Thanks for your time.
> Cheers,
> James Arcus
> /UCC President & Wheel Member/
[...]
> > *From:*Harshana Arambawela
> > *Sent:* Friday, 29 November 2019 2:37 PM
> > *To:* wheel at ucc.asn.au
> > *Subject:* Email security appliance migration for ucc.asn.au and
> > ucc.guild.uwa.edu.au
> > 
> > Hi Team,
> > 
> > How are you doing? Hope you keeping fine.
> > 
> > I?m Harshana from Network Team. I?m working on the project to migrate
> > the email security appliance (IronPort) to new appliance hosted in
> > cloud. In terms of the change, your emails should be flow as normal
> > during the migration window but may have some email delay for 5-10 mins.
> > 
> > I?m planning to have the migration on 12 Dec between 07.00 ? 11.45 am,
> > however Change request approval is pending. I will confirm the date once
> > I have the go ahead from change team.

On Wed, Dec 04, 2019 at 05:29:05AM +0000, Harshana Arambawela wrote:
> Hi James,
> 
> Thanks for email and pointing out on the ucc.gu.uwa.edu.au. This needs to be pointed to the new IPs as well.
> 
> Kind regards,
> Harshana Arambawela

> From: Harshana Arambawela
> Sent: Friday, 29 November 2019 2:37 PM
> To: wheel at ucc.asn.au<mailto:wheel at ucc.asn.au>
> Subject: Email security appliance migration for ucc.asn.au and ucc.guild.uwa.edu.au
> 
> Hi Team,
> 
> How are you doing? Hope you keeping fine.
> 
> I'm Harshana from Network Team. I'm working on the project to migrate the email security appliance (IronPort) to new appliance hosted in cloud. In terms of the change, your emails should be flow as normal during the migration window but may have some email delay for 5-10 mins.
> 
> I'm planning to have the migration on 12 Dec between 07.00 - 11.45 am, however Change request approval is pending. I will confirm the date once I have the go ahead from change team.
> 
> Domain
> Destination Hosts
> Name Servers
> Primary MX Records
> Secondary MX Records
>
> ucc.asn.au
> 130.95.13.9
> ns2.he.net.
> ns2.afraid.org.
> ns4.he.net.
> mooneye.ucc.gu.uwa.edu.au.
> ns3.he.net.
> mail-ext-in1.uwa.edu.au
> mail-ext-in2.uwa.edu.au
> 
> ucc.guild.uwa.edu.au
> 130.95.13.9
> ns2.he.net.
> ns2.afraid.org.
> ns4.he.net.
> mooneye.ucc.gu.uwa.edu.au.
> ns3.he.net.
> mail-ext-in1.uwa.edu.au
> mail-ext-in2.uwa.edu.au
> 
> During the change window, need to point the MX records to following.(I will confirm the date and time)
>              esa2.hc253-53.ap.iphmx.com       139.138.42.213
>              esa4.hc253-53.ap.iphmx.com       139.138.31.194
>              esa1.hc253-53.ap.iphmx.com       139.138.42.212
>              esa3.hc253-53.ap.iphmx.com       139.138.31.193
> 
> Please let me know you are ok with the plan and I'm happy jump into a call if you have any concerns or questions.
> 
> Thanks and Kind regards,
> Harshana Arambawela
> Senior Network Engineer
> University IT  *  M463, Perth WA 6009 Australia
> *  T  +61 8 6488-2186 *  M +61 420 539-446  *  E harshana.arambawela at uwa.edu.au<mailto:harshana.arambawela at uwa.edu.au>

-- 
   Nick Bannon   | "I made this letter longer than usual because
nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal