Skip to content
Sudonix

Tutorial for secure emailing with personal domain,Cloudflare, virtualmin and postfix

Unsolved Linux
30 2 12.0k 1
  • DownPW DownPW

    OUPS 🙂

    Ok so I think it’s Hetzner who is blocking.
    I will make them an unblocking request.

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #17

    @DownPW Yep 🙂

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW
    DownPW
    DownPW
    wrote on
    #18

    Indeed. +1 for telnet.

    I just trusted the netstats which told me that everything is OK which is certainly the case on the server.

    since I didn’t have Telnet on hand I tested a website which told me OK

    ba38b6b1-1bbc-497a-b787-81edf7662a6b-image.png

    PW and WS Spirit alive

    0
  • DownPW DownPW

    Indeed. +1 for telnet.

    I just trusted the netstats which told me that everything is OK which is certainly the case on the server.

    since I didn’t have Telnet on hand I tested a website which told me OK

    ba38b6b1-1bbc-497a-b787-81edf7662a6b-image.png

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #19

    @DownPW said in Tutorial for secure emailing with personal domain,Cloudflare, virtualmin and postfix:

    since I didn’t have Telnet on hand I tested a website which told me OK

    I have to confess, I installed the telnet-client on your server for diagnostic purposes.

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    😊
    0
  • DownPW DownPW

    OUPS 🙂

    Ok so I think it’s Hetzner who is blocking.
    I will make them an unblocking request.

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #20

    @DownPW said in Tutorial for secure emailing with personal domain,Cloudflare, virtualmin and postfix:

    I will make them an unblocking request.

    Curious to know how you got on with this…

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW
    DownPW
    DownPW
    wrote on
    #21

    sorry for the late response my friends. They unblocked port 25 very quickly and I can send emails;

    Just that the domains in caramail.com refused my sending of email for obscure reasons and protonmail, I receive them but in spam with an error message

    I will share all its errors with you to see and I would like to deepen that the DMARC, and DKIM puts the private/public key which I do not really understand (see my request above)

    https://sudonix.org/post/8462

    PW and WS Spirit alive

    0
  • DownPW DownPW

    sorry for the late response my friends. They unblocked port 25 very quickly and I can send emails;

    Just that the domains in caramail.com refused my sending of email for obscure reasons and protonmail, I receive them but in spam with an error message

    I will share all its errors with you to see and I would like to deepen that the DMARC, and DKIM puts the private/public key which I do not really understand (see my request above)

    https://sudonix.org/post/8462

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #22

    @DownPW emails are going to junk because of missing DNS records as I mentioned previously. You won’t need to use the public and private keys unless you need extended and/or advanced functions.

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW
    DownPW
    DownPW
    wrote on
    #23

    I have the DNS pointers present

    image.png

    PW and WS Spirit alive

    0
  • DownPW DownPW

    I have the DNS pointers present

    image.png

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #24

    @DownPW not all are there. The SPF record is missing. That’s enough to place email you sent into junk at the recipient end.

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW
    DownPW
    DownPW
    wrote on
    #25

    Spf is on the screenshot

    PW and WS Spirit alive

    phenomlab 2 Replies
    0
  • DownPW DownPW

    Spf is on the screenshot

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #26

    @DownPW sorry, yes, it is. Completely missed that.

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW DownPW

    Spf is on the screenshot

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #27

    @DownPW Can you PM me your domain name so I can run a few tests?

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW
    DownPW
    DownPW
    wrote on
    #28

    Yep no problem

    PW and WS Spirit alive

    phenomlab 2 Replies
    0
  • DownPW DownPW

    Yep no problem

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #29

    @DownPW thanks. See PM. You can validate your domain in terms of its email suitability by using the checker below

    https://emailhealthcheckup.com/

    In addition, there are some great generators and checkers here

    https://dmarcly.com/tools/

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
  • DownPW DownPW

    Yep no problem

    phenomlab
    phenomlab
    phenomlab
    wrote on
    #30

    @DownPW any update?

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Gratmore Ltd

    0
Log in to reply

Related Topics
  • DownPW

    Tutorial : NodeBB Scaling-clustering Redis + Proxied Cloudflare Free plan : integration guide

    Performance nodebb scaling redis cloudflare socket.io
    3
    4 Votes
    3 Posts
    2k Views
    crazycells
    thanks @DownPW ! this is definitely very helpful.
  • Hari

    Setting up Ghost DIgitalOcean droplet with cloudflare

    General ghost digitalocean cloudflare ubuntu
    11
    4 Votes
    11 Posts
    4k Views
    phenomlab
    @Hari Really? Can you elaborate a bit more here?
  • DownPW

    Error certification on virtualmin/Nginx

    Solved Linux cert virtualmin nginx
    17
    2
    0 Votes
    17 Posts
    7k Views
    phenomlab
    @DownPW anytime
  • DownPW

    NodeBB socket with CloudFlare

    Solved Performance socket cloudflare nodebb
    24
    3 Votes
    24 Posts
    14k Views
    DownPW
    Solved. Tuto here and here
  • Panda

    Where to add to DNS settings for Google crawl

    Solved Configure dns
    4
    1 Votes
    4 Posts
    2k Views
    phenomlab
    @eveh yes, as the DNS will be natively registered there.
  • cagatay

    MailGun Not Working NodeBB

    Solved Configure mail mailgun
    6
    1 Votes
    6 Posts
    2k Views
    cagatay
    @phenomlab did it i did not create smtp user on mailgun. everything is working now. [image: 6cc6061f-ed5d-41f6-8eb7-5d98f98b3706-image.png]
  • Hari

    Issues getting Flarum to work on new host

    Solved Configure virtualmin
    65
    14 Votes
    65 Posts
    30k Views
    phenomlab
    @crazycells huh. Thanks. Will need to check that as well.
  • JAC

    Email issue (virturalmin)

    Solved Hosting virtualmin
    5
    0 Votes
    5 Posts
    2k Views
    JAC
    @gotwf said in Email issue (virturalmin): @jac Typically you want your domain’s MX records to point to FQDN server name, e.g. foo.example.eg % drill stockportcounty.fans mx ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 63911 ;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;; stockportcounty.fans. IN MX ;; ANSWER SECTION: stockportcounty.fans. 600 IN MX 10 stockportcounty.fans. Yours do not. Although a bit more drillin’ and reverse lookup indicates thusly; % drill stockportcounty.fans ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 160 ;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;; stockportcounty.fans. IN A ;; ANSWER SECTION: stockportcounty.fans. 600 IN A 65.108.63.35 ;; AUTHORITY SECTION: ;; ADDITIONAL SECTION: ;; Query time: 127 msec ;; SERVER: 204.8.232.207 ;; WHEN: Sun Oct 10 19:37:02 2021 ;; MSG SIZE rcvd: 54 <kvg@loon:~>% drill -x 65.108.63.35 ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 57802 ;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;; 35.63.108.65.in-addr.arpa. IN PTR ;; ANSWER SECTION: 35.63.108.65.in-addr.arpa. 86400 IN PTR vps.stockportcounty.fans. I think you probably want your mx record to point to vps.stockportcountry.fans. It is important for forward and reverse lookups for MX records jive. Maybe you are looking like a spammer in that they do not? Edit: But at least you have a reverse record, many spammers do not, so that is a big red flag. Thanks for the advice, will look into it all later once back home.