Adds 11 client articles and 5 project articles: Clients: kittle, khalsa, anaise, azcomputerguru.com, bg-builders, evs, furrier, horseshoe-management, kittle-design, scileppi-law, western-tire Projects: discord-bot, radio-show, msp-pricing, wrightstown-smarthome, wrightstown-solar Updates wiki/index.md with all new entries, cross-references, and removes seeded client:birthbiologic from compilation queue. Critical findings surfaced: - Kittle: WS2025 EVAL license, no backups, 3 plaintext creds in Syncro - Western Tire: SSL cert *.westerntire.com expires 2026-05-30 - Kittle Design: active compromise (Ken inbox rule unresolved) - Horseshoe Mgmt: plaintext creds for 5+ users in Syncro notes Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
5.0 KiB
type, name, display_name, last_compiled, compiled_by, sources
| type | name | display_name | last_compiled | compiled_by | sources | |
|---|---|---|---|---|---|---|
| client | furrier | Furrier (Mike Furrier / Western Tire / Desert Rat) | 2026-05-24 | DESKTOP-0O8A1RL/claude-main |
|
Furrier / Mike Furrier
Overview
- Business type: Mike Furrier is the owner/contact behind multiple entities: Western Tire and Desert Rat (desertrat.com). These are managed under a single Syncro customer record.
- Syncro Customer ID: 391491
- Billing model: Time and materials [unverified — one invoice observed]
- Billing rate: $150/hr [unverified — $75.00 billed for 30 min remote]
- Contract status: Unknown
Note: Mike Furrier is also the customer contact for Western Tire (see wiki/clients/western-tire.md). These may be the same Syncro record. Confirm whether furrier and western-tire are the same Syncro customer.
Contacts
| Name | Title | Notes | |
|---|---|---|---|
| Mike Furrier | Owner | (not documented) | Primary contact for desertrat.com and Western Tire |
| Tim Furrier | Employee/forwarder user | tim@desertrat.com | Forwarder → timfurrier@gmail.com; was sending from Gmail causing DMARC failures |
Infrastructure
Websvr (ACG-hosted cPanel)
| Property | Value |
|---|---|
| Hostname | websvr.acghosting.com |
| External IP (primary) | 162.248.93.233 |
| External IP (secondary) | 162.248.93.81 |
| OS | CentOS 7 |
| WHM version | 11.110.0.95 |
| SSH port | 22 |
| SSH credentials | Vault: infrastructure/websvr (do NOT hardcode) |
| WHM API Token | Vault only — do not hardcode |
| cPanel account | desertra |
| Domain | desertrat.com |
[WARNING] Session log contained plaintext SSH credentials and WHM API token. These must not be committed or referenced outside the vault. Retrieve via
vault.sh get-field.
Mail architecture (desertrat.com)
- Mail hosted on websvr.acghosting.com (cPanel/exim).
- Inbound spam filter: Mailprotector (emailservice.io front-end).
tim@desertrat.comis a forwarder (not a mailbox) →timfurrier@gmail.com. Located in/etc/valiases/desertrat.com.- 38 mailboxes/forwarders total.
Network
DNS (desertrat.com)
- DNS Host: AWS Route 53
- MX:
10 desertrat-com.inbound.emailservice.io,20 .inbound.emailservice.cc,30 .inbound.emailservice.co - SPF:
v=spf1 +a +mx +ip4:162.248.93.233 +ip4:162.248.93.81 +include:spf.wdsolutions.com +include:spf.us.emailservice.io -all - DKIM:
default._domainkey.desertrat.com— active, signed by Websvr - DMARC:
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100— full enforcement
Cloud / M365
(not documented)
GuruRMM
(not documented)
Active Projects / Open Items
| Priority | Item | Owner |
|---|---|---|
| P1 | Tim configures Gmail "Send mail as" using Websvr SMTP (mail.desertrat.com:587 or :465) to stop DMARC rejections | Mike Furrier / Tim |
| P2 | Mailprotector user import CSV delivered — Mike Furrier to import into Mailprotector admin manually | Mike Furrier |
| P3 | Confirm with WebShop whether their DKIM record add request is still needed (Websvr DKIM already active) | Mike Swanson |
Key Events / History
2026-04-21 — desertrat.com DMARC/SBR email fix
Syncro ticket #32181 (ID: 109263692). Invoice #67437 — $75.00 + tax = $81.53. Status: Invoiced.
Root cause: Two compounding issues:
tim@desertrat.comis a forwarder to Gmail. Tim replies from Gmail usingtim@desertrat.comas From. Gmail's servers are not in desertrat.com SPF → DMARC p=reject rejects on inbound.- Mailprotector SBR was unconfigured —
/etc/mailprotector_domainson Websvr was empty; desertrat.com was never enrolled, so outbound forwarded mail bypassed Mailprotector relay.
Fix applied: Added desertrat.com to /etc/mailprotector_domains on websvr. No exim restart required (runtime lsearch lookup). Outbound now routes through desertrat-com.outbound.emailservice.io.
Permanent fix still pending: Tim must configure Gmail "Send mail as" with Websvr SMTP credentials to send mail that passes DMARC.
Mailprotector user import CSV
Created C:\Users\guru\Downloads\desertrat_mailprotector_import.csv — 38 entries. Key aliases:
- desertrat60 → store60
- desertrat64 → store64
- jobs → tim
Anti-Patterns / Warnings
- [WARNING] Tim's DMARC rejections will recur any time he replies from Gmail as tim@desertrat.com until "Send mail as" is properly configured. Do not attempt a DNS-level workaround — the correct fix is client-side SMTP configuration.
- [WARNING] DMARC is
p=rejectat 100% — any SPF/DKIM misalignment will hard-fail with no fallback. Be careful with any DNS or mail-routing changes. - Do NOT look for tim@desertrat.com in cPanel email accounts — it is a forwarder in
/etc/valiases/desertrat.com, not a mailbox. - Mailprotector has no automated sync for non-AD/365/Google environments — user import is manual CSV only.
Backlinks
- wiki/clients/western-tire.md — Western Tire is another entity under Mike Furrier (same Syncro customer ID 391491)