infantex

Since it's taking long to restore Tommy from its DDoS attack, I moved the web and email services to the VPN. 

It seems I got mail right but for the website I'm getting an Internal Server Error (Error Code: 500), any ideas?

Thanks.

I checked and I'm getting the same IP I registered in CloudFlare. Guess Krydos still has not gotten to change the IP on my account.

OK. Bad news.

My nameserver is CloudFlare. I'll need to check Plesk for the new IP... but I can't login at heliohost.org. Will we be emailed when our account gets moved to a new IP? I guess, at that time, I'll be able to login.

Is it me being unable to login an indication that my account has still to get moved?

User: infantx
Server: Tommy
Domain: infantex.com.mx

There was a brief interruption this morning, both in the VPS (vps40) and Tommy (website and email). Then, the site was up again, but, almost immediatly, it went down and has remained down for about 4 hours. 

Mail is also not working and I can't login to the control panel.

My website is, finally, back online but, how can I prevent its deactivation in the future?

You mentioned something about a .well-known directory being accessible but I don't really understand what you're refering to.

Based on the answers given to other people having the same problem I posted the permission settings for said folder (rwx r-x r-x) and the contents of my .htaccess file:

10 hours ago, infantex said:

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php54” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php54 .php .php5 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

What should I do?

Here's my .htaccess file:

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php54” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php54 .php .php5 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

I see it was generated way back by cPanel (I guess). From what I see, it only mentions PHP settings. I do use PHP 5.6.40 because newer versions "break" my contact form.

1 hour ago, Kairion said:

As for enabling your (sub)domains, you can do that on your Plesk panel by clicking on your domain (if its data isn't showing) and then on its status just change it to "Activate" or "Enable":

OK. I found Status control in Plesk (I thought you were refering only to subdomains and didn't pay much attention at first) and changed it to Active for my three domains, but the sites remain inaccessible: I keep getting the default web server's page and the message that there's no website at my address.

I don't know what you mean with:

1 hour ago, Kairion said:

Please make sure your .well-known directory is accessible through your domain

Do I have a .well-known directory?

How do I make sure that it is accessible? I checked and, right now, only the main page is accessible, I can access none of the other pages; I get an error: The requested URL /preguntas.php was not found on this server (to name one of the pages, for example).

I logged into Plesk and there's a .well-known directory under public_html, permissions for group and others are read and execute, is it accessible as is, or should it have also write access for group and/or others? Would that be secure?

Also, permissions for the files of my pages (preguntas.php, quienes_somos.php, contacto.php and productos.php), are all the same: Owner: rw-, Group and Others: r--. Same for index.php, but only it is accessible. My whole site is gone now!

I only get the Web Server's Default Page, and Plesk states that: "You see this page because there is no Web site at this address." Well, there was!

Hello.

I tried to send an email in response to the contact form in my website and got an error message: 

535 5.7.8 Error: authentication failed: authentication failure

I use GMail to connect to my different email accounts, I have not changed passwords neither in Plesk nor in GMail. I tried to login directly to webmail to check the password but I the get an error 503 Service Temporarly Unavailable.

User: infantx
Site: infantex.com.mx
Server: Tommy

On 2/16/2023 at 9:41 PM, Kairion said:

• How do you get the email addresses for your emails?

Mostly, they're given to us directly by the interested party. We mainly correspond with people we have a bussiness relationship with, i.e., customers and suppliers. Some other emails we gather from our contact form on our website, which are usually prospective customers asking for quotations, and the occasional prospective supplier offering products they consider we may be interested in.

On 2/16/2023 at 9:41 PM, Kairion said:

• How do people unsubscribe from your emails?

We don't have subscriptions lists, i.e., we don't send massive emails. Almost all of our emails are targeted towards a unique recipient. As such, we don't have an unsuscribe link or option in the email. When people don't want to continue receiving our mails, they usually write us to provide an alternative, updated address the emails should be addressed to... or they may provide an additional address they want us to send another copy of the emails to.

And I say "almost" because we have send (kind of) massive emails. They were Christmas Card emails send to our regular clients and main suppliers. But they weren't that "massive", I mean, I entered the emails one by one, by hand.

On 2/16/2023 at 9:41 PM, Kairion said:

• How many emails do you expect to send a day?

That's a though one. I mean 50 seems pretty low but, how many would it be enough? There's two people sending email from the infantex.com.mx domain. Yesterday, I sent 20 emails. Let's say the other person sends another 20. Then, there's this account (info) we use to answer emails we receive from the contact form, on a busy day that would be 5-10 (there's days we don't receive any). An also the "fiscal" account (cfdi) which we use to send invoices, etc. During our high season (back-to-school) we would be making five shipments daily but, mostly, invoices have to be sent to multiple addresses (the buyer and her assistants, accounts payable, warehouse, the occasional manager...), so it may be around 20. All in all, 100 emails a day may suffice, I would go with 200, just to be on the safe side.

On 2/16/2023 at 9:41 PM, Kairion said:

• Please provide an example email.

I'm attaching several samples:

• A reply to a request for quotation from a regular client.
• Sending new price list to a regular customer.
• A reply to a customer asking us to participate in a promotion event.
• A shipment notification.
• A conversation with our bank executives.

Regards,

P.S. I tried to attach the emails but they were rejected with a message that the maximum total size for attachments is only 21.8 kB (is that correct? I didn't use to have this problem).

Instead, I uploaded them to a folder in my site: https://infantex.com.mx/files/email-samples/

new-price-list.eml

Hello.

I would like to have my email limit increased to 20 per hour per account. 

Since Plesk replaced cPanel and I moved my email to Tommy, the limit of 10 emails/h seemed somehow limited. I couldn't increase it then and I can't increase it know. However low it seemed to me, I had never hit it... until today that I was sending the new price list for this year to our customer base and began receiving returned mails that couldn't be delivered. I solved it scheduling the emails to be send later, but I would really like to have that restriction raised. Nothing spectacular, I would think that 20 per hour should suffice.

Can it be done?

8 hours ago, Kairion said:

Alternatively, you can simply run the following command:

sudo /usr/local/hestia/bin/v-list-mail-domain-dkim-dns infantx infantex.com.mx

This time, it worked.

However, I had already solved the problem adding a DNS zone for infantex.com.mx and copying the DKIM record from there. As I mentioned in a previous post:

I don't know whether I would have gotten the necessary records if I had run that command before creating (?) the records the way I did.

Also, I could never get the mail and webmail.infantex.com.mx addresses to work.

Anyways, I'm now back on Tommy.

Regards,

On 2/7/2023 at 4:00 PM, Kairion said:

Let me know if running with sudo worked.

It didn't work.

infantex@vps40:~$ sudo v-list-mail-domain-dkim-dns infantx infantex.com.mx
[sudo] password for infantex: 
sudo: v-list-mail-domain-dkim-dns: command not found

59 minutes ago, herrerapoch said:

I can not access to my plesk dashboard and to my website. Is there any forecast of when it could be fixed. Thank u so much

I don't think there's a forecast. Krydos is working on this issue.

What I ended up doing is adding a DNS zone for infantex.com.mx (althoug it won't be used), deactivating DKIM for the domain and activating it again so that a DKIM record was created, and copied it's contents to Cloudflare. It seems to have worked.

I used mailgenius to check it. DKIM turned out to be OK, but I was surprised to learn that both my domain (infantex.com.mx) and the VPS's IP (65.19.141.197) were blacklisted! Mailgenius report: https://app.mailgenius.com/spam-test/979562

However, upon checking https://check.spamhaus.org/, neither one appears to be listed. Should I research more on this subject?

By the way, the v-list-mail-domain-dkim-dns command still gives me an error.

11 hours ago, Kairion said:

About your DKIM you can get it on your HetiaCP > DNS > Click on your domain > You will find a TXT record named "mail._domainkey". Edit it and copy its value and add it to your DNS hosting with the same name.

Since my DNS is hosted by Cloudflare, there's nothing under DNS. So no mail._domainkey record to copy from.

DNS page in HestiaCP image: https://screencast-o-matic.com/i/c0nifCVxC9n

I found (https://forum.hestiacp.com/t/solved-invalid-signature-of-dkim/3028) that when using an external DNS service, you can use the `v-list-mail-domain-dkim-dns` command to query the correct records. However, it didn't work for me. I get an error:

infantex@vps40:~$ v-list-mail-domain-dkim-dns infantx infantex.com.mx
/usr/local/hestia/func/main.sh: line 1548: /usr/local/hestia/conf/hestia.conf: Permission denied
Error: user infantx doesn't exist
/usr/local/hestia/func/main.sh: line 100: /usr/local/hestia/log/error.log: Permission denied
infantex@vps40:

I have three users in HestiaCP: admin, infantx and zaldivar. The infantex.com.mx domain belongs to the infantx user, but I get the same error no matter which user I enter. I even tried with user infantex (the user I to log into my VPS with) to no avail.

Users image: https://screencast-o-matic.com/i/c0nifpVxCPN

11 hours ago, Kairion said:

Per HestiaCP default, your webmail should be accessible from the address webmail.infantex.com.mx, but you need to make sure your DNS hosting has an A record (named webmail) pointing towards your VPS' IP address (the same with MAIL, IMAP, SMTP, and POP)

I do have an A webmail record pointing to my VPS's IP in Cloudflare.

DNS records in Cloudflare image: https://screencast-o-matic.com/i/c0nifGVxC9F

Note: I still can´t post images in messages (it complains about exceding a maximum image size, 21 KB today). Is this something you have recently changed? I used to post screenshoots without problems before.

Update: Configured the other infantex.com.mx email accounts in GMail, both reading (POP3) and sending (SMTP). Everything seemed to be OK, received several emails after configuring, so it seems to be working. Send an email and also worked... but it landed in spam. I may need to recheck my DMARC/DKIM/SPF configuration. The only thing I did was to add the VPS's IP to the SPF record, so now it reads: "v=spf1 ip4:65.19.141.77 ip4:65.19.141.197 ~all". I didn't change the DKIM record (I don't remember where I got the current value.)

Configured also mail for zaldivar.mx. SPF record for that domain is a little different, though: "v=spf1 a mx ip4:65.19.141.77 ip4:65.19.141.197 -all"

Still, no webmail (for any of the domains).

6 hours ago, wolstech said:

Silly question, but do you actually have a mail server installed (and the appropriate mailboxes set up on it)? 

As for webmail, is the web server set up for a webmail subdomain? I get a 500 error, so either its set up and broken, or it's not set up.

Well, I suppose it is. I just added a mail domain in HestiaCP and added three accounts there:

(I tried to add a screenshot here but since this morning I'm getting the error: "You can opload a total of 21.8 kB", well, in the morning the limit was 70-something).

Here´s a link to the image of the list of email accounts: https://screencast-o-matic.com/i/c0nherVxADH

Image of mail domain configuration: https://screencast-o-matic.com/i/c0nhe0VxAD7

Image of an example account configuration: https://screencast-o-matic.com/i/c0nheTVxADR

I don't know if I have to activate the mail server somewhere else in HestiaCP.

Edit: GMail is reading correctly the two accounts I setup this morning. I didn't do anything, just let it rest. So POP3 seems to be working. webmail is still not accesible.

12 hours ago, Krydos said:

Another thing you could consider is setting up a free Zoho account, or another free mail hosting service, and changing your MX records on your domain. When the sending mail server retries they will see the new MX record and send it to Zoho or whoever you use instead.

You gave me the idea of setting the mail servers on my VPS (VPS40) but I must be doing something wrong because I can neither connect from GMail to retreive email, nor navigate to webmail.

I changed the DNS entries in Cloudflare to the VPS' s IP:

But, I get an error message when trying to connect from GMail... I disabled the proxy in Cloudflare for all the entries and I stopped receiving the error, but now it's locked with the message: "Checking new messages...". It's been like 5 minutes now. And, also, I can't still navigate to webmail.infantex.com.mx.

Any ideas what I'm doing wrong?

2 hours ago, Pansani said:

See the announcement below:

 

OK. I didn't know. That notice was given about 7 hours after I posted my question. Hopefully it will be resolved promptly. 

In the meantime, my question remains: What will happen to the undelivered mail? Will it be returned to the sender? Will it be lost with none the wiser? I am hoping the sending server, not being able to contact Tommy, will try to deliver it for a certain time (2, 3 days?) and, then, if Tommy is still down (nooo!), report it as undeliverable. But that maybe just wishful thinking.

I can't reach my site (infantex.com.mx).

I can't log in to Plesk.

By the way, I use Cloudflare as proxy, shouldn't I be able to see my site up even if Tommy was down? I know this is more of question for Clodflare but you may know the answer.

Edit: I can't also connect to the POP server to retrieve messages (understandable if Tommy's down), what would happen to the incoming email? Will it be returned to sender?

Regards,

14 hours ago, wolstech said:

With the way Plesk works, sort of. The mail server is the mail server, if it responds for Tommy2 it should respond for you provided DNS is configured correctly (MX and SPF at minimum if you need to receive and send).

That said, unlike the cpanel days, it's possible for the email service to be disabled for a specific account. The server will still accept connections when it's disabled, so it will report as up, but it will refuse incoming email and discard outbound email without sending it.

OK, from what you said, I understand that, once I have the mail for my domains properly configured (i.e., I am able to send and receive email), checking Tommy's mail servers will suffice to guarantee my domains' mail services are working... unless someone disabled them, either you or me.

14 hours ago, wolstech said:

The ways email gets disabled on an account are: sending too many emails (we just turn your mail off now instead of suspending you entirely like we did in cpanel), getting suspended (including for inactivity, you obviously can't check it, and I don't think you can receive it while you're suspended)

In the case that you were to disable my mail service (as in your example, for sending too many mails), would I get notified of the fact?

14 hours ago, wolstech said:

or manually turning it off (I believe we have to do that for you).

We can activate and deactivate the mail services for our domains ourselves in Plesk, via the Mail Settings page:

8 hours ago, allu62 said:

Concerning the monitoring, I think that I will write a Perl script that periodically checks if the different services are running, and if one of them isn't, sends me an email. This could be done for all services and shouldn't be too difficult to do.

Perhaps that should be the way to go... I've no idea how that would be done, though. 😄 But I can look into it (another learning opportunity).

My concern is that I only use my zaldivar.mx domain for e-mail (vanity e-mail for my family), but it doesn't really get used a lot, most still prefer Gmail and the like. However, my mom's registered e-mail for the tax authority (SAT in Mexico) is a zaldivar.mx mail. Until now, that posed no problem since any official notification had to be done via snail-mail, or by courier. But now, they have implemented a "tributary mailbox" as a means of official notification. That means, they will post a notification there and send an email instructing you to go check it. And even if you don't, after a certain time, you will be considered legally notified of that communication. Those are the kind of emails you wouldn't want to miss.

As of now, every now and then, when I remember, I send an email to her address and check that it's received. So far so good. I just wanted some automated testing for peace of mind... Or perhaps I could register my own zaldivar.mx mail on one of those sites that constantly flood you with email. 😄 

Regards, everyone,

On 1/22/2023 at 7:44 AM, wolstech said:

If you do actual http monitor (which will make an http request and look at response code), yes it works on CF (CF returns a 5xx code when the origin server is down).

Uptime Robot does report the occasional downtime. I'm seeing 98.6% uptime for infantex.com.mx for the last seven days. Last downtime was reported on 2023-01-24 at 23:15:16 (timezone?) and lasted for 28 min.

On 1/21/2023 at 8:38 PM, wolstech said:

If you want to use the CF proxy feature, set Uptime Robot to watch the server's host name instead of your own domain (it'd work if he points it to tommy2.heliohost.org instead).

OK, I will change the settings to monitor tommy2.heliohost.org's ports 465 and 995.

But, can I be sure that if Tommy's mail is up so are my domain's?

On 1/21/2023 at 7:47 PM, Kairion said:

Could you share what settings you're using on Uptime Robot?

For the website:
   Monitor type: HTTP(s)
   Friendly name: infantex.com.mx
   URL (or IP): https://infantex.com.mx
   Monitor interval: 30 min
   Monitor timeout: 30 s

For the mail servers: