Files
claudetools/wiki/clients/furrier.md
Mike Swanson f4fb131529 wiki: seed remaining clients and projects (batch 3)
Adds 11 client articles and 5 project articles:

Clients: kittle, khalsa, anaise, azcomputerguru.com, bg-builders,
evs, furrier, horseshoe-management, kittle-design, scileppi-law,
western-tire

Projects: discord-bot, radio-show, msp-pricing, wrightstown-smarthome,
wrightstown-solar

Updates wiki/index.md with all new entries, cross-references, and
removes seeded client:birthbiologic from compilation queue.

Critical findings surfaced:
- Kittle: WS2025 EVAL license, no backups, 3 plaintext creds in Syncro
- Western Tire: SSL cert *.westerntire.com expires 2026-05-30
- Kittle Design: active compromise (Ken inbox rule unresolved)
- Horseshoe Mgmt: plaintext creds for 5+ users in Syncro notes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 19:59:40 -07:00

5.0 KiB

type, name, display_name, last_compiled, compiled_by, sources
type name display_name last_compiled compiled_by sources
client furrier Furrier (Mike Furrier / Western Tire / Desert Rat) 2026-05-24 DESKTOP-0O8A1RL/claude-main
clients/furrier/session-logs/2026-04-21-session.md

Furrier / Mike Furrier

Overview

  • Business type: Mike Furrier is the owner/contact behind multiple entities: Western Tire and Desert Rat (desertrat.com). These are managed under a single Syncro customer record.
  • Syncro Customer ID: 391491
  • Billing model: Time and materials [unverified — one invoice observed]
  • Billing rate: $150/hr [unverified — $75.00 billed for 30 min remote]
  • Contract status: Unknown

Note: Mike Furrier is also the customer contact for Western Tire (see wiki/clients/western-tire.md). These may be the same Syncro record. Confirm whether furrier and western-tire are the same Syncro customer.

Contacts

Name Title Email Notes
Mike Furrier Owner (not documented) Primary contact for desertrat.com and Western Tire
Tim Furrier Employee/forwarder user tim@desertrat.com Forwarder → timfurrier@gmail.com; was sending from Gmail causing DMARC failures

Infrastructure

Websvr (ACG-hosted cPanel)

Property Value
Hostname websvr.acghosting.com
External IP (primary) 162.248.93.233
External IP (secondary) 162.248.93.81
OS CentOS 7
WHM version 11.110.0.95
SSH port 22
SSH credentials Vault: infrastructure/websvr (do NOT hardcode)
WHM API Token Vault only — do not hardcode
cPanel account desertra
Domain desertrat.com

[WARNING] Session log contained plaintext SSH credentials and WHM API token. These must not be committed or referenced outside the vault. Retrieve via vault.sh get-field.

Mail architecture (desertrat.com)

  • Mail hosted on websvr.acghosting.com (cPanel/exim).
  • Inbound spam filter: Mailprotector (emailservice.io front-end).
  • tim@desertrat.com is a forwarder (not a mailbox) → timfurrier@gmail.com. Located in /etc/valiases/desertrat.com.
  • 38 mailboxes/forwarders total.

Network

DNS (desertrat.com)

  • DNS Host: AWS Route 53
  • MX: 10 desertrat-com.inbound.emailservice.io, 20 .inbound.emailservice.cc, 30 .inbound.emailservice.co
  • SPF: v=spf1 +a +mx +ip4:162.248.93.233 +ip4:162.248.93.81 +include:spf.wdsolutions.com +include:spf.us.emailservice.io -all
  • DKIM: default._domainkey.desertrat.com — active, signed by Websvr
  • DMARC: v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100 — full enforcement

Cloud / M365

(not documented)

GuruRMM

(not documented)

Active Projects / Open Items

Priority Item Owner
P1 Tim configures Gmail "Send mail as" using Websvr SMTP (mail.desertrat.com:587 or :465) to stop DMARC rejections Mike Furrier / Tim
P2 Mailprotector user import CSV delivered — Mike Furrier to import into Mailprotector admin manually Mike Furrier
P3 Confirm with WebShop whether their DKIM record add request is still needed (Websvr DKIM already active) Mike Swanson

Key Events / History

2026-04-21 — desertrat.com DMARC/SBR email fix

Syncro ticket #32181 (ID: 109263692). Invoice #67437 — $75.00 + tax = $81.53. Status: Invoiced.

Root cause: Two compounding issues:

  1. tim@desertrat.com is a forwarder to Gmail. Tim replies from Gmail using tim@desertrat.com as From. Gmail's servers are not in desertrat.com SPF → DMARC p=reject rejects on inbound.
  2. Mailprotector SBR was unconfigured — /etc/mailprotector_domains on Websvr was empty; desertrat.com was never enrolled, so outbound forwarded mail bypassed Mailprotector relay.

Fix applied: Added desertrat.com to /etc/mailprotector_domains on websvr. No exim restart required (runtime lsearch lookup). Outbound now routes through desertrat-com.outbound.emailservice.io.

Permanent fix still pending: Tim must configure Gmail "Send mail as" with Websvr SMTP credentials to send mail that passes DMARC.

Mailprotector user import CSV

Created C:\Users\guru\Downloads\desertrat_mailprotector_import.csv — 38 entries. Key aliases:

  • desertrat60 → store60
  • desertrat64 → store64
  • jobs → tim

Anti-Patterns / Warnings

  • [WARNING] Tim's DMARC rejections will recur any time he replies from Gmail as tim@desertrat.com until "Send mail as" is properly configured. Do not attempt a DNS-level workaround — the correct fix is client-side SMTP configuration.
  • [WARNING] DMARC is p=reject at 100% — any SPF/DKIM misalignment will hard-fail with no fallback. Be careful with any DNS or mail-routing changes.
  • Do NOT look for tim@desertrat.com in cPanel email accounts — it is a forwarder in /etc/valiases/desertrat.com, not a mailbox.
  • Mailprotector has no automated sync for non-AD/365/Google environments — user import is manual CSV only.