122 lines
6.7 KiB
Markdown
122 lines
6.7 KiB
Markdown
---
|
|
type: client
|
|
name: klem-littlehearts
|
|
display_name: Bob Klem / Little Hearts Little Hands
|
|
last_compiled: 2026-06-15
|
|
compiled_by: GURU-BEAST-ROG/discord-bot
|
|
sources:
|
|
- clients/internal-infrastructure/session-logs/2026-03-17-neptune-exchange-cleanup.md
|
|
- discord thread 1516115120453844992 (2026-06-15)
|
|
---
|
|
|
|
# Bob Klem / Little Hearts Little Hands
|
|
|
|
Education-sector client. Email hosted on ACG's Neptune Exchange server with Mailprotector CloudFilter filtering. The school was previously known as **Air and Space Academy** and was later renamed to **Little Hearts Little Hands**. Two legacy domains (airandspaceacademy.com, lifelonglearningacademy.com) are kept active and are intended to function as aliases delivering to the primary @littleheartslittlehands.org mailboxes.
|
|
|
|
---
|
|
|
|
## Profile
|
|
|
|
- **Primary contact:** Bob Klem / Robert Klem
|
|
- **Domains:**
|
|
- `littleheartslittlehands.org` — primary mail domain
|
|
- `airandspaceacademy.com` — legacy alias domain (school's former name)
|
|
- `lifelonglearningacademy.com` — legacy alias domain
|
|
- **Domain registrar:** GoDaddy (client's own account — ACG does NOT have API access)
|
|
- **Mailprotector account:** Bob Klem, account ID 17414
|
|
|
|
---
|
|
|
|
## Email Hosting
|
|
|
|
Mail is hosted on **Neptune Exchange** (ACG-managed, physically at Dataforth D2). Inbound and outbound filtered via **Mailprotector CloudFilter**.
|
|
|
|
### Intended Architecture
|
|
|
|
`littleheartslittlehands.org` is the **primary domain**. The two legacy domains are **email address aliases** on the same mailboxes — mail sent to `rklem@airandspaceacademy.com` delivers to the `rklem@littleheartslittlehands.org` mailbox. No forwarding; the alias addresses are proxy addresses on the Exchange mailbox object.
|
|
|
|
### Mailprotector Domain Provisioning (as of 2026-06-15)
|
|
|
|
| Domain | MP Domain ID | Status |
|
|
|---|---|---|
|
|
| airandspaceacademy.com | 29764 | Active (provisioned 2020-03-15) |
|
|
| littleheartslittlehands.org | 49493 | Active (provisioned 2024-05-07) |
|
|
| lifelonglearningacademy.com | — | **NOT provisioned** |
|
|
|
|
### MX Records (as of 2026-06-15) — BOTH WRONG
|
|
|
|
Both alias domains currently point MX directly to `mail.acghosting.com`, bypassing Mailprotector. Neptune's inbound restriction transport rule (priority 0) **blocks direct delivery** for these domains — meaning inbound mail to both alias domains is currently being rejected.
|
|
|
|
| Domain | Current MX | Correct MX |
|
|
|---|---|---|
|
|
| airandspaceacademy.com | `mail.acghosting.com` (priority 10) | `airandspaceacademy-com.inbound.emailservice.io` |
|
|
| lifelonglearningacademy.com | `mail.acghosting.com` (priority 10) | `lifelonglearningacademy-com.inbound.emailservice.io` (after MP provisioning) |
|
|
|
|
**Action required:**
|
|
1. Provision `lifelonglearningacademy.com` in Mailprotector under account 17414 (Bob Klem)
|
|
2. Update both MX records in GoDaddy (client's account — need credentials from client)
|
|
3. Standard Mailprotector secondary/tertiary MX pattern: priority 10/20/30 via .io/.cc/.co
|
|
|
|
### Neptune Exchange Mailboxes (as of 2026-06-15)
|
|
|
|
#### Correctly configured — .org primary with alias addresses
|
|
|
|
| Display Name | Primary SMTP | Alias Domains Present |
|
|
|---|---|---|
|
|
| Robert Klem | rklem@littleheartslittlehands.org | @airandspaceacademy.com, @lifelonglearningacademy.com, @littleheartslittlehands.com |
|
|
| Marylou Klem | marylou@littleheartslittlehands.org | @airandspaceacademy.com, @lifelonglearningacademy.com |
|
|
|
|
#### Needs alias addresses added — .org primary, no legacy domain aliases
|
|
|
|
| Display Name | Primary SMTP | Missing Aliases |
|
|
|---|---|---|
|
|
| Ms Williamson | swilliamson@littleheartslittlehands.org | @airandspaceacademy.com, @lifelonglearningacademy.com |
|
|
|
|
#### Standalone mailboxes — primary is still legacy domain, NOT alias on .org mailbox
|
|
|
|
These accounts have a legacy domain as their primary address. No corresponding @littleheartslittlehands.org mailbox exists. Status deferred per Mike (2026-06-15) — do not convert until instructed.
|
|
|
|
| Alias | Primary SMTP | Notes |
|
|
|---|---|---|
|
|
| ajoseph | ajoseph@airandspaceacademy.com | Former staff? |
|
|
| email | email@airandspaceacademy.com | Generic address |
|
|
| lschlegel | lschlegel@airandspaceacademy.com | Former staff? |
|
|
| mrocha | mrocha@airandspaceacademy.com | Former staff? |
|
|
| RicohCopier | RicohCopier@airandspaceacademy.com | Device mailbox — verify if copier still active |
|
|
| sbranch | sbranch@airandspaceacademy.com | Former staff? |
|
|
| tstevens | tstevens@airandspaceacademy.com | Former staff? |
|
|
| specialeducation | specialeducation@lifelonglearningacademy.com | Generic/role address |
|
|
|
|
### SBR / Send Connector (outbound)
|
|
|
|
| Domain | SBR Tag | Send Connector | Smart Host |
|
|
|---|---|---|---|
|
|
| airandspaceacademy.com | airandspaceacademy.sbr | Outbound.LittleHearts | littleheartslittlehands-org.outbound.emailservice.io |
|
|
| lifelonglearningacademy.com | lifelonglearningacademy.sbr | Outbound.LLA | lifelonglearningacademy-com.outbound.emailservice.io |
|
|
| littleheartslittlehands.org | littleheartslittlehands.sbr | Outbound.LittleHearts | littleheartslittlehands-org.outbound.emailservice.io |
|
|
|
|
### Neptune Transport Rules Affecting This Client
|
|
|
|
- **Restrict Inbound - Devcon and LittleHearts** (priority 0): Rejects inbound mail to airandspaceacademy.com / littleheartslittlehands.org / .com that does NOT arrive from Mailprotector IPs. Direct-to-Neptune delivery is blocked. This is why the broken MX records cause inbound mail to fail.
|
|
|
|
---
|
|
|
|
## Open Items
|
|
|
|
1. **[CRITICAL] Fix airandspaceacademy.com MX on GoDaddy** — Mailprotector already provisioned. Just needs MX updated to `airandspaceacademy-com.inbound.emailservice.io`. Requires client's GoDaddy account credentials.
|
|
2. **[CRITICAL] Provision lifelonglearningacademy.com in Mailprotector** — not yet in MP. Must do before changing MX.
|
|
3. **[CRITICAL] Fix lifelonglearningacademy.com MX on GoDaddy** — same as above, after MP provisioning. Requires client's GoDaddy account credentials.
|
|
4. **[LOW] Add alias addresses to Ms Williamson's mailbox** — `swilliamson@airandspaceacademy.com` and `swilliamson@lifelonglearningacademy.com` proxy addresses missing.
|
|
5. **[DEFERRED] Standalone legacy-domain mailboxes** — 8 accounts still have old domain as primary. Mike to advise which (if any) need .org counterparts or should be disabled.
|
|
|
|
---
|
|
|
|
## History
|
|
|
|
| Date | Event |
|
|
|---|---|
|
|
| 2020-03-15 | airandspaceacademy.com provisioned in Mailprotector |
|
|
| 2024-05-07 | littleheartslittlehands.org provisioned in Mailprotector |
|
|
| 2026-03-17 | Neptune cleanup — spam purged from airandspaceacademy.com mailboxes; SBR routing configured; inbound restriction rule created. MX fix deferred. |
|
|
| 2026-06-15 | Mailbox audit via RMM. Confirmed MX on both alias domains still pointing direct to mail.acghosting.com. GoDaddy API key is ACG's account — client domains are in client's own GoDaddy. |
|