Add PTR (DNS Reverse)

Discussion in 'ISPConfig 3 Priority Support' started by chsdaiguil, Jan 16, 2025.

Tags:
  1. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Hello

    I can send emails to most services with Rouncube installed by default from Ispconfig, except outlook, homail or gandi.

    These email services ask me to enter the PTR (Reverse DNS) coordinates of our server.

    This action can only be done from the server, so probably from Ispconfig.

    Could someone guide me for this somewhat technical manipulation?

    Thank you
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This usually is not from your server but from the hoster/datacenter of your server. So, nothing that you set in ISPConfig. Check the company's server panel where you rented the server or VPS; you should be able to set the PTR there.
     
  3. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Gandi.net (provider of our domain) answers: A PTR record is used for "reverse DNS". It is managed at the server level and not at the domain level. It is generally used when you host your own DNS or your own mail server. It allows you to verify the identity of the server that sent the email.

    We host our mail server with Roundcube by default from Ispconfig.

    Do you have any idea how to perform this DNS manipulation with Ispconfig?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    They confirm what I told you already, especially since this is configured on the server/datacenter level and not the domain level (in ISPConfig).

    As I mentioned, this is on the server/datacenter level and not the domain level, so you must contact the company that assigned you the IP address to set the PTR for you, as you likely can not set it at the domain level in ISPConfig yourself.

    There are cases where such a PTR is set by you, but this is only the case when you run your own data center and manage IP addresses yourself, which is likely not the case. here is a guide for PTR DNS if you run your own datcenter and manage IP addresses yourself, but this likely does not apply to you: https://www.howtoforge.com/tutorial/setting-up-your-own-name-service-with-ispconfig/

    So, as mentioned in my previous answer, contact your data center or internet access provider from which you got the public IP of your server and request them to set the PTR for you as this is a record that is in the DNS servers of the company that manages the IP address and not a DNS record of your domain, which you could manage with ISPConfig.
     
    chsdaiguil likes this.
  5. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Merci
     
  6. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Thank you. I ordered a failovers IP from our provider.

    I don't know how to configure it yet, I'm doing some research. I have a question though.

    Is it possible to configure the PTR with the default roundcube service from Ispconfig: domain.com:8080/webmail

    Or should we install Roundcube on a dedicated domain name like webmail.domain.com
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    There should be no failover IP needed for a PTR unless your provider told you that they are unable to set a ptr for your current IP. It might be best if you just write the support of your provider an email, tell them your current server hostname and IP and ask them to set the PTR for you in their system.

    Roundcube is an email client, like Outlook or Thunderbird; the only difference is that you can use this email client through a web browser. PTR records are DNS records, thréy are not directly related to a mail client like RoundCube. Mail clients can never set a PTR record. A PTR record is a DNS record which is set in the DNS server of your provider as it belongs to the IP address and not your domain.

    No, it makes no difference for a PTR DNS-Record how you access an email client.
     
    chsdaiguil likes this.
  8. remkoh

    remkoh Active Member HowtoForge Supporter

    Only the owner of an IP address can create a PTR record for that IP address.
    Though it is possible they delegate it (but that's rare).

    A PTR record can be created for ANY (public) IP address.
    Not being able is just a lame excuse.
    Plenty of hosters/datacenters out there on the internet that don't want the hassle and therefor tell you they can't do it.
     
  9. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Hello

    The provider has answered us.

    He asks us to fill in our PTR on this page. However, the reverse already seems to be in place in IPv4. I added the reverse IPv6 but I can't add the server1.xxxx.biz to this column.

    Do you know what values to add to column 2 and if column 1 needs to be modified to resolve our Roundcube ISpconfig email server authentication problem?

    Column 1 (IPv4) :
    Reverse pour 51.***.***.76 (Adresse IP de serveur) : serveur.xxxx.com
    Column 2 (IPv6) :
    Reverse pour 2001:****:****:****:****:****:****:79c0 (Adresse IP de serveur) : ????
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    You should ask your provider; it's their interface, and they assign you the IP addresses.
     
    chsdaiguil likes this.
  11. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    You were right, it is the ISP that manages the Reverse PTR.

    However, I now have to restart the server for our reverse IPv6 address to be active.

    Our ISP provider is not very helpful.

    Before I restart our server, please, is this configuration correct:

    Reverse IPv4 for 51.**.**.76 (Server IP address) > server.domain.tdl.

    Reverse IPv6 for 2001:**:**:**:**:**:79c0 (Server IP address) > server.domain.tdl.

    From our DNS domian.tdl Gandi I added the columns
    A > 51.**.**.76
    AAAA > 2001:**:**:**:**:**:79c0

    In ISpcongig I added the IPv4 and IPv6 in:
    System > IP Addresses
    Ports: 80,443
    HTTP Vhost: Yes

    Before restarting our server, do I delete the configuration below on our ISP, or do we need an IPv6 Block to make Rouncube from Ispconfig our email provider?

    If yes is this configuration correct:
    IP Block Delegation Status DNS DUID
    2001:**:**:: /48 > ns-**-a.gandi.net, ns-**-b.gandi.net, ns-**-c.gandi.net

    Thank you very much
     
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    IP addresses must be configured in the network interface configuration files, the exact way differs for each hoster, so your provider should help you with that. But if I understand you correctly, your mail server was working already, and you just had a problem that the PTR record at your provider was missing, so there should be no need to change anything IP-related on your server. Also, a restart of your server is not needed or useful when your provider changes or sets the PTR. So, I have no idea why they claim. You shall restart the server as it makes no sense regarding PTR record change.

    There is no need to addy any of these IP's in ISPConfig. So you should remove it under System > IP Addresses.

    RoundCube is an email client; it's not an email provider. You can use RoundCube to access an email account in the same way that you can use e.g. Thunderbird or Outlook. So RoundCube is not your email server or provider. The component if your server that does email sending and receiving is Postfix and the component that handles the mailboxes is Dovecot.
     
    chsdaiguil likes this.
  13. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Hello

    Unfortunately, I can't get out of this story. The IPv4 address that my ISP provides me is in Spam at Microsoft (outlook, live, hotmail...). The solution seems to be to get me a failover IP address in order to change the IP address of our site that sends the newsletters.

    Can you tell me how to configure a failover IP address in the debian 11 apache 2 configuration file of our ISPconfig server: /etc/network/interfaces

    Thanks
     
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    This depends on your provider. They must tell you the exact configuration when providing the IP. This is not ISPConfig specific; it's only specific to your provider's network setup.

    One thing that you must do, though, is to configure postfix in main.cf file to use that new IP for sending emails:

    Code:
    smtp_bind_address = X.X.X.X
     
  15. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Thanks

    The failover IP address is now active on our server

    I added your line at the end of the /etc/postfix/main.cf file

    Then I restarted postfix: sudo systemctl restart postfix

    For the moment our site still sends emails with the old IP, although I changed the DNS A

    Maybe wait 48 hours
     
  16. till

    till Super Moderator Staff Member ISPConfig Developer

    It should start sending with the new Ip right away. Is there maybe more than one smtp_bind_address line in that file?
     
  17. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    There is only one, but the site sends emails from OVH, and this line persists: X-OVh-ClientIp:51.***.**.76

    I will send emails from the server, I will do that tomorrow
     
  18. till

    till Super Moderator Staff Member ISPConfig Developer

    If the site sends emails trough OVH mail systems and not your server, then changing the IP will have no effect.
     
    chsdaiguil likes this.
  19. chsdaiguil

    chsdaiguil Member HowtoForge Supporter

    Thanks

    it works
     
    Last edited: Feb 9, 2025

Share This Page