Configure CyberPanel DNS and Secure Email Server: Part 3 of 4

[@theindianshopkeepers]

You saved me man I had issue with sending mails to gmail but after following all your steps it's working like charm. Thanks buddy

[@DimensionQuest]

Glad to hear that!!

[@j0elxb]

Thanks for these videos super easy to follow along!

[@DimensionQuest]

Thanks! I appreciate hearing that!

[@RookieSDR]

When I send an email I get an Undelivered Mail Returned to Sender. Any fix for this?

[@ricardogomes799]

Thanks for the great tutorial. Perfect guide for setting a professional service to any customer. Here's a hint for a future post: how to serve email for different domains on same VPS (currently struggling with SMTP authority for unique PTR record at VPS level). Great job though!

[@DimensionQuest]

I've actually been wondering about that myself.. I've used numerous providers in the past for my hosting/mail services. They all provided me with a control pane (CPanel, Plesk, Custom, etc..) and the server had MANY domains beyond the several that I hosted with them. Since they are typically shared hosting, all those domains had a shared IP address so having PTR records for every domain would not be possible. With that in mind, it seems to me that it can't be a dire requirement. In any case, thank you very much for the kind words and taking the time to post a comment.

[@ricardogomes799]

@@DimensionQuest Well I've been struggling with Hostinger VPS + CyberPanel where its implied that a single hostname must be set for rDNS. The issue is when I set a new mail server for a different domain than the hostname provided as PTR: all sent emails are delivered to SPAM inbox. MXTools points me to the right direction when it says it's a PTR issue. I'll invest some more time cracking this and will share the solution when I find it.

[@mcclausky]

Wonderful. Thanks for uploading such a detailed guide!

[@DimensionQuest]

Glad you enjoyed it!

[@MichaelSharpTechniSmart]

Really helpful video. I am trying this approach because a Cloudflare full strict setup still gives me incomplete certificate chain no mater how I set it up. Your approach is a lot less work and its fully inegrated with Cyberpanel, which is great. Thank you for such a useful video. I will post it on Cyberpanel's Discourse in reply to my own question, which is still unanswered.

[@DimensionQuest]

Good luck! I've seen quite a few comments here and in the CyberPanel communities around issues with CloudFlare. I guess it will be challenging in any case, but the extra security/protection features that CloudFlare brings to the table are worth the extra effort - if you can get it to work :D

[@muhazmi_]

Hi, there. I want to ask about the content from your video, is it a must to create nameserver from the cyberpanel? because i use NS from cloudflare.

[@DimensionQuest]

No, it is not a must. You can certainly use any 3rd party NS you like. CF is a very popular one for sure. You'll just need to make sure to add entries in CF each time you create new things in CyberPanel. The built-in bits in CyberPanel simplify the record creation, but it doesn't give us the same stability, security, etc.. that CF offers.

[@RookieSDR]

Your last 2 videos have been amazing, really like the breakdown of each step and the blog to follow along. Q: I already have Cloudfare as my DNS, is it wise to integrate it with cyberpanel as well?

[@DimensionQuest]

This really boils down to how often you need to make DNS updates. If it is for your own personal stuff without a lot of updates, you're probably best off keeping Cloudflare as your DNS and just pointing relevant records to your CyberPanel as needed. I have never looked into the integration personally so I can't offer any more specific advice.

[@simbaclaws_youtube]

Could you please make a part of the video saying how you setup your domain registrar's information (whatever provider)? Did you simply just setup the nameservers for the domain? What exactly did you do to get the domains pointed and working to the cyberpanel instance?

[@DimensionQuest]

Please watch the first video in this series: Reinstall OS on RackNerd VPS for CyberPanel: Part 1 of 4, specifically, right here: kzbin.info/www/bejne/i2eQeICoj9Soqck . I show the exact steps I took in my Registrar - google domains.

[@simbaclaws_youtube]

@@DimensionQuest Thank you, that is awesome :) I got my server working

[@DimensionQuest]

Great! Happy to hear that!

[@mossabennis6558]

Thank you very much for the tutorial . well explained

[@DimensionQuest]

You are quite welcome! Thank you very much for taking the time to comment ;)

[@elisnfirst]

Awesome tutorial! But I got a problem. I did all the steps that you show on your video, and my email server sends emails correctly, but I'm not receiving for some reason. Could you have some idea about it?

[@DimensionQuest]

It's really hard to know for sure. Most commonly, the mail ends up in the Junk Mail/SPAM folder due to something not be validated somewhere. Even when everything is aligned properly, you can still end up with issues if your mail server's IP address has been flagged somewhere (or even the CIDR block your IP belongs to) for someone abusing (IE: Spamming, etc...)

[@gregorikeller6928]

Hello buddy, thank you so much for the informative content. I am sorry for the selfish question here, however I have a problem with mailserver SSL where all the SSL has been self-signed when issued. SSL works correctly for domain names, clouflare records are set up correctly I am just wondering if you have ever ran into the same issue ?

[@DimensionQuest]

Greetings Grégori, no I haven't run into that issue.. My VPS is not currently behind Cloudflare and the records aren't there either... CyberPanel uses HTTP based validation for the LetsEncrypt certificates. The mail server needs a CyberPanel "website" to associate with. Did you do the steps at the 6:52 mark in the video?

[@gregorikeller6928]

@@DimensionQuest Thank you so much for your answer, after multiple trials I have found the solution. It looks like these 2 commands were the reason to issue a correct SSL so I am dropping them here in hope it help someone. postmap -F hash:/etc/postfix/vmail_ssl.map systemctl restart dovecot && systemctl restart postfix now SMTP has SSL certificate and connect as expected through port 587. Farewell dear friend : )

[@DimensionQuest]

Thanks for sharing you solution here. Hopefully it helps others :)

[@Joelwebmaster]

I have an interesting question, who manages your web domain, because if you create DNS independent of your domain provider when creating SSL, Google will mark it as insecure, I await your response, greetings

[@DimensionQuest]

As noted in my video, my domain(s) are registered with Google: domains.google.com ... I don't get how/why Google would mark a domain as insecure unless something isn't setup correctly in DNS.

[@onlinecart5573]

I set up my server email exactly as you did in this video , but unfortunately my emails don't going in or out . what's the problem ?

[@DimensionQuest]

First thing that comes to mind is firewall ports at the provider level.

[@sevketkarayilan]

Awesome, thank you. But Second, third domain(web site) and reversedns?

[@DimensionQuest]

Reverse DNS can only be set for one domain. Consider any of the major shared website hosting providers: HostGator, Namecheap, and the thousands of others using CPanel, Plesk, CyberPanel, etc... each of their servers hosts 10s - 100s of domains, providing web, e-mail, etc... all from a single IP each. Hosting/E-mail does not require a dedicated IP/Reverse Lookup entry for every domain hosted. Thanks for watching and taking the time to comment :)

[@agugentile]

Hi! Thanks for your video! My emails always go to spam Gmail how did you fix that?

[@DimensionQuest]

I don't know what to say there... Perhaps your IP or the subnet you're on has poor reputation, resulting in the spam scores landing messages in the GMAIL spam folder. I'm not sure how that can be fixed, it's a bit beyond my general experience. Good luck though!

[@agugentile]

@@DimensionQuest thanks! Yes, I am pretty sure Google detects the ip as a threat. I think the best way would be using cloudflare email redirection fir incoming and smtp google for outgoing

[@pablorodrigoxD]

friend, i am using cloudflare on my server. In the case of the nameservers that in my registrar I pointed to cloudflare, what would it be like? I got a little confused.

[@DimensionQuest]

Hello Pablo, thank you for watching my videos and taking the time to comment. I have not done any work with CyberPanel + Cloudflare yet. I have seen a lot of people appear to have challenges in this area. I have also seen that within CyberPanel, there is an option to synchronize DNS records from CyberPanel's DNS to Cloudflare - you need to create an API key for the DNZ Zone you wish to sync records to and include that in your CyberPanel Config. Again, I have not personally done this so you'll need to seek those details out in the docs, CyberPanel Community, or other people's videos. Good luck!

[@danastudebaker6480]

followed all step yet email never sent. I used cloudflare domains., perhaps the domains registrar also counts

[@DimensionQuest]

Cloudflare seems to be quite special, please visit this thread if you haven’t already: community.cloudflare.com/t/cant-get-my-cyberpanel-to-send-smtp-trafic-thru-cloudflare/350062 . Hopefully that helps you out…

[@branduncensored]

thanks, the only problem is my outgoing emails are going to spam folder.

[@DimensionQuest]

Did you do the mail checker bit to see if there is a mismatch or anything? I’m not too sure what else to do there.

[@sanu1231000]

When I am looking up my DNS using DNS checker.... everything is masked by cloudflare except the MX records. Attackers can easily see my origin IP through my MX records. How to remove/mask my origin IP from MX records?

[@DimensionQuest]

I don't know enough about CloudFlare to answer this or even know if it is possible. I've seen in some of the self-hosting Reddits that many people get a low cost or free VPS and use that as the endpoint for DNS entries so that their self hosted things at their home IP does not expose the home IP. The only exposure is the VPS IP.

[@sanu1231000]

@@DimensionQuest did a lot of research after posting that question. Not possible. You cannot mask your MX records.

[@Ayzekbk]

i did everyting but when i sent mail via webmail in cyberpanel, i am still seeing "No encryption" message in my gmail. Please Help ! What could be went wrong ? my mail-terter result is 8.9/10

[@DimensionQuest]

I'm not sure what "No encryption" message in gmail means.. I've not seen this so I don't quite understand what the issue is. I even checked back on the e-mails I received in my gmail account from my CyberPanel account and don't see any message about encryption. Even clicking the option to view original (shows all mail headers in gmail) didn't show any such message. How/Why is your result only 8.9/10? were you able to fix that up and get it to 10/10?

[@tokennmaster]

hi. after installing cyberpanel and load it at port8090 i get a 503 error. how fo you advise? am stuck.

[@DimensionQuest]

503?? odd, I haven't come across that in the few times I installed Cyberpanel. You may want to try the Cyberpanel communities for support: community.cyberpanel.net/search?q=503

[@Frankie_Freedom]

What VPS allows outbound traffic on port 25

[@DimensionQuest]

I provide a link to the provider I use in my CyberPanel series. Outbound traffic isn't usually the problem. Most sites/systems need the ability to send notification e-mails outbound (IE: Wordpress updates, ticketing systems, password reset notifications for communities/forums software, etc...) Even the providers the block inbound mail ports by default may open them upon request.

[@Frankie_Freedom]

@@DimensionQuest thanks for the explanation I must have missed it in the video. Reason I mention is because I'm curr using Linode and asked about that. Which they responded with quite a bit of an explanation and justification for allowing me to do it.

[@jcheng1981]

I had the same issues before watching the videos here, I have to send a request trou the vps provider and they opened the port for smtp and port 25 for traffic, even thou my firewalls was set for the port 25 for inbound and outbound , I was still getting errors from reversed dns, I suggest contact your vps provider for rdns troubles, I went trou to many tutorials and search about dozens of sites, in the end I came with a post from a website suggested tot ake to your dns provider and the dns provider told me to contact my vps provider and I got everything done trou it

[@paradise4987]

Make a video how to setup dns of this with cloudflare

[@DimensionQuest]

It may take a while, if I ever decide to move my DNS over to CloudFlare... I've made a note. Thanks for the suggestion.

[@colgema007]

ty man for share 🤙

[@DimensionQuest]

No problem 👍, thanks for watching

[@Art-01]

Thank u

[@DimensionQuest]

No problem

[@kaimadigan5558]

rainloop not found any ideas?

[@BurkeAzbill]

Check your install summary details, I recall reading that rainloop was replaced with a forked copy…

[@kaimadigan5558]

@@BurkeAzbill thanks, i just did a cyberpanel upgrade it all works now :D

[@Mr.mokhtar]

How i can build a compain

[@DimensionQuest]

I stopped using CyberPanel shortly after producing the video series. Even when I used it, mass mailing or campaign was never in my interests so I can’t answer this one. You’re better off using the CyberPanel community. Good luck and thanks for watching.