Jump to content

pete20r2

Members
  • Posts

    39
  • Joined

  • Last visited

Posts posted by pete20r2

  1.  

    Is there a way to get exim logs to figure out what happened?

    You sent too many emails.

     

     

    Don't know what I did to deserve the attitude. Could have saved yourself the time of writing that.

    50 emails in and out in a day is not normal traffic for my account, so either something has gone wrong or I'm compromised.

    If anyone would like to be helpful that would be appreciated.

  2. 1. I understand correctly that "sudo apt update" and "sudo apt upgrade" WON'T update my OS as well? I really don't want to break things up.

    • sudo apt-get update # Fetches the list of available updates
    • sudo apt-get upgrade # Strictly upgrades the current packages
    • sudo apt-get dist-upgrade # Installs updates (new ones)

       

    https://askubuntu.com/questions/733434/one-single-command-to-update-everything-in-ubuntu/733439

     

     

    2. I still can't email to gmail, How can I do the following? Or maybe you already did it and I need to wait for 2-3 days?

     

    You need to take a step back and figure out what you're doing. If you're going through the trouble of setting up DMARC I'd also set up DKIM.

    All 3 (SPF,DKIM and DMARC) rely on DNS records, so if you don't have a local DNS then you aren't going to be able to do much.

    You can setup a local NS through Vesta:

    https://vestacp.com/docs/#how-to-setup-vanity-nameservers

    You will then need to go to your domain registrar and point it at your domain name servers where you can then set all your own SPF, DKIM and DMARC records.

     

    Or

    You can use your registrars name servers if they let you specify your own TXT entries and do it all there.

     

    The entry would look something like this, I just generated it using a free DMARC generator:

     

    Type: TXT
    Host/Name: _DMARC.stockdiv.com
    Value: v=DMARC1; p=quarantine; rua=mailto:postmaster@stockdiv.com; ruf=mailto:postmaster@stockdiv.com; sp=quarantine; fo=1; adkim=s; aspf=s
    
    

    OR

    Ask nicely for the required entries to be made on the Helio nameservers (SPF seems to already be done this way)

     

    OR

    Use cloudflare as a nameserver, if your registrar doesn't allow TXT entries.

  3. OK, nearly there.
    https://www.mail-tester.com/test-lo1sg

    10/10 with some notes on List-Unsubscribe header, which I'll ignore since I'm not doing any mass emailing.

    I've got my IP removed from dnsbl.spfbl.net blacklist.

    The only relevant issues I can see reported on https://dnschecker.org/domain-health-checker.php for baskovich.com are:

     

    No TLS support.

    Reverse DNS does not match SMTP Banner.
    SOA Serial Number Format is Invalid.

     

    Is there anything I can do about these?

     

    Also, would I be right in assuming that the email header (in incoming and outgoing) should no longer make mention of ricky.heliohost.org?

     

    Thanks for the help so far.

  4. Hi, thanks for that. Website works fine but emails seem to have deliverability issues.
    Mxtoolbox reports authentication errors with dmarc, although the dkim and spf records are correct. Is this the issue of emails still being delivered from ricky? 
    I'm having a bit of trouble diagnosing where the actual issue is. Gmail accepts incoming mail but I think that might be becuase I trained it on my last attempt. 

  5. As an extension to my previous question (old account, should be deleted now), why doesn't ricky.heliohost.org have a PTR record?

    Also, I've checked exactly why my mail was being rejected and it looks like the IP is reported on SORBS. I think I can get away with no rDNS with most mail servers since SPF DKIM and DMARC are all working.

    Do admins here make an effort to de-list helio IPs or is it a Sisyphean activity, is de-listing something I can do myself?

    post-36117-0-79319500-1561083348_thumb.png

     

     

     

  6. 1. So they are telling everybody to update to 4.92 but it's still not available? I agree with you that there is no reason to compile the source etc...

    Once you have sorted your major issue out I would strongly consider doing this.

    4.91 has a known exploit, hence the push to update.

    https://nvd.nist.gov/vuln/detail/CVE-2019-10149

    Cpanel also made a post:

    https://blog.cpanel.com/exim-cve-2019-10149-protect-yourself/?utm_source=cpanel_forums&utm_medium=banner&utm_campaign=exim-cve-2019-10149

     

    Also try the following, I already put the ID from the email that failed in post #11 in there, might shed some more light on why the email failed.

    grep 1haCN9-000TIg-Ea /var/log/exim_mainlog
  7. Hey guys,

    I'm setting up a python script that will run on a cron job (twice a day, no more no less ;).

    I used to be on stevie but I neglected the account and lost it, now I am on the problem child that is johnny.

    The script was written for python2.7, as far as I can tell the server only has 2.6.6 and 3.6 installed. Would it be possible to get the classic 2.7 installed?

    While I'm here, could I also ask that the following modules are installed:

    shutil
    os
    time
    datetime
    math
    urllib2
    array
    operator
    httplib
    MySQLdb
    re
    Thanks for the great work!
    -P

     

×
×
  • Create New...