Commit 7c845234 authored by Marcin Sedlak-Jakubowski's avatar Marcin Sedlak-Jakubowski

Merge branch 'john_long-docs-add-note-incoming-email' into 'master'

Add note suggesting best practice for address used

See merge request gitlab-org/gitlab!34874
parents b2ea9c2a 6c45a770
...@@ -21,6 +21,11 @@ GitLab has several features based on receiving incoming emails: ...@@ -21,6 +21,11 @@ GitLab has several features based on receiving incoming emails:
## Requirements ## Requirements
NOTE: **Note:**
It is **not** recommended to use an email address that receives or will receive any
messages not intended for the GitLab instance. Any incoming emails not intended
for GitLab will receive a reject notice.
Handling incoming emails requires an [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol)-enabled Handling incoming emails requires an [IMAP](https://en.wikipedia.org/wiki/Internet_Message_Access_Protocol)-enabled
email account. GitLab requires one of the following three strategies: email account. GitLab requires one of the following three strategies:
...@@ -106,6 +111,16 @@ Alternatively, use a dedicated domain for GitLab email communications such as ...@@ -106,6 +111,16 @@ Alternatively, use a dedicated domain for GitLab email communications such as
See GitLab issue [#30366](https://gitlab.com/gitlab-org/gitlab-foss/-/issues/30366) See GitLab issue [#30366](https://gitlab.com/gitlab-org/gitlab-foss/-/issues/30366)
for a real-world example of this exploit. for a real-world example of this exploit.
CAUTION:**Caution:**
Be sure to use a mail server that has been configured to reduce
spam.
A Postfix mail server that is running on a default configuration, for example,
can result in abuse. All messages received on the configured mailbox will be processed
and messages that are not intended for the GitLab instance will receive a reject notice.
If the sender's address is spoofed, the reject notice will be delivered to the spoofed
`FROM` address, which can cause the mail server's IP or domain to appear on a block
list.
### Omnibus package installations ### Omnibus package installations
1. Find the `incoming_email` section in `/etc/gitlab/gitlab.rb`, enable the feature 1. Find the `incoming_email` section in `/etc/gitlab/gitlab.rb`, enable the feature
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment