configuring the MX field in ispConfig

Discussion in 'Server Operation' started by kameleon1er, Sep 18, 2020.

  1. kameleon1er

    kameleon1er Member

    Hi to all,
    the mail and DNS aspect of things is still a bit confusing for me.
    I have a domain with a registrar: kameleon.fr

    The DNS servers are those of my registrar, and since I'm not a specialist, I think I'll leave it like that for now, for security.

    So, I simply created a field of type A > ip_address_my_ispConfig

    But I would still like to manage my email accounts.

    At the moment, at the registrar, my e-mail account is configured like this:
    Code:
    @    IN SOA dns12.ovh.net. tech.ovh.net. (2020091700 86400 3600 3600000 86400)
                     IN NS     ns12.ovh.net.
                     IN NS     dns12.ovh.net.
                     IN MX     1 redirect.ovh.net.
                     IN TXT    "1|www.kameleon.fr"
    www              IN TXT    "3|welcome"
    www              IN TXT    "l|fr"
    what I don't understand is;
    do I just need to change the MX address or do I need to create a DNS zone for "kameleon.fr" in ispConfig for the domain that should receive the mails?

    I can't find a clear explanation on the internet.

    Thank you for your help.
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    You should point the MX record to a FQDN, for example "mail.kameleon.fr." (with that trailing dot). You would also have to create a A record for mail.kameleon.fr. to your-ip-address

    The DNS zones are only relevant when you want to host your own nameservers.
     
  3. kameleon1er

    kameleon1er Member

    hi @Th0m something like this ?
    Code:
                     IN NS     dns12.ovh.net.
                     IN NS     ns12.ovh.net.
                     IN MX     5 redirect.ovh.net.
                     IN A      163.172.143.149
                     IN TXT    "1|www.kameleon.fr"
    mails            IN MX     1 kameleon.fr.
    I add one @ priority 1 "mails IN MX 1 kameleon.fr." and keep the registar one with priority 5 "IN MX 5 redirect.ovh.net."
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    No, you should remove "mails" from that subdomain, and replace 1 kameleon.fr. with 1 mail.kameleon.fr.

    then add a A record for the subdomain mail pointed to your ip
     
  5. kameleon1er

    kameleon1er Member

    Hi @Th0m , it drives me crazy with this DNS stuff, A fields, MX ... :eek:
    is it better this way?
    Code:
    $TTL 86400
    @    IN SOA dns12.ovh.net. tech.ovh.net. (2020091806 86400 3600 3600000 86400)
                     IN NS     ns12.ovh.net.
                     IN NS     dns12.ovh.net.
                     IN MX     1 kameleon.fr.
                     IN MX     5 redirect.ovh.net.
                     IN A      163.172.143.149
                     IN TXT    "1|www.kameleon.fr"
     
  6. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    If 163.172.143.149 is the IP address of your server, it will work. But I would strongly advise you as stated before to add a record
    MAIL IN A IPADDRESSOFYOURSERVER
    and point your mx record to 1 mail.kameleon.fr.

    If you want to start sending out email aswell, you will have to set up verification records (SPF, DKIM, DMARC)
     
  7. kameleon1er

    kameleon1er Member

    @Th0m You really want to kill me :)
    Ok, I begin to create SPF, DKIM et DMARC @ my registar's panel, but when I activate my domain "kameleon.fr" in ispConfig I created DKIM. Do I need re-use it ? or recreate one in registar's Panel ? Thanks, sorry for my ignorance :oops:
     
  8. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Yes, you have to copy the DKIM key from the panel to your registrar.
    No problem ;)
     
  9. kameleon1er

    kameleon1er Member

    hi @Th0m , I'm still lost in dns and mx jungle… Do you think it's ok now for my mx, little bit confused between mail… and mails whit s…
    Code:
    $TTL 86400
    @    IN SOA dns12.ovh.net. tech.ovh.net. (2020091904 86400 3600 3600000 86400)
                 IN NS     dns12.ovh.net.
                 IN NS     ns12.ovh.net.
                 IN MX     1 mails.kameleon.fr.
                 IN MX     5 redirect.ovh.net.
                 IN A      163.172.143.149
                 IN TXT    "1|www.kameleon.fr"
                 IN TXT    "v=1; a=rsa-sha256; c=relaxed/simple; d=kameleon.fr; h=  user-agent:message-id:subject:subject:from:from:date:date  :content-transfer-encoding:content-type:content-type  :mime-version; s=default; t=1600528607; x=1602343008; bh=T9revRd  3WumQMFXseASINmXH+K5"
             600 IN TXT    "v=spf1 a mx ptr ~all"
    mails        IN A      163.172.143.149
    srv-a        IN A      163.172.131.140
    www          IN TXT    "3|welcome"
    www          IN TXT    "l|fr"
     
  10. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Code:
    IN TXT    "v=1; a=rsa-sha256; c=relaxed/simple; d=kameleon.fr; h=  user-agent:message-id:subject:subject:from:from:date:date  :content-transfer-encoding:content-type:content-type  :mime-version; s=default; t=1600528607; x=1602343008; bh=T9revRd  3WumQMFXseASINmXH+K5"
    This seems like it's the top of a email header. Why is it in your DNS records?

    You are missing a DKIM and a DMARC record.
     
  11. kameleon1er

    kameleon1er Member

  12. kameleon1er

    kameleon1er Member

    better ?

    Code:
    $TTL 86400
    @    IN SOA dns12.ovh.net. tech.ovh.net. (2020091906 86400 3600 3600000 86400)
                 IN NS     ns12.ovh.net.
                 IN NS     dns12.ovh.net.
                 IN MX     1 mails.kameleon.fr.
                 IN MX     5 redirect.ovh.net.
                 IN A      163.172.143.149
             600 IN TXT    "1|www.kameleon.fr"
             600 IN TXT    "v=spf1 a mx ptr ~all"
             600 IN TXT    "default._domainkey.kameleon.fr. 3600   TXT   v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKIFt176rW+/tmeS0wy6+uHgT/yrExC/NE7/Gxe9O985dubtC3vdkiylurusy/FGNT7fCo4dX9KFH9IaRaBaMXiIyQgG/cl/xHNLqXL0ZFr+8VnM3ann8DAJT78UDHjvBZypJHEmNuqB/Fclo8mK0Mi24+w2"
    mails        IN A      163.172.143.149
    srv-a        IN A      163.172.131.140
    www          IN TXT    "3|welcome"
    www          IN TXT    "l|fr"
     
  13. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    No, you copy and pasted it without seeing what was in it.
    Instead of
    Code:
    600 IN TXT    "default._domainkey.kameleon.fr. 3600   TXT   v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKIFt176rW+/tmeS0wy6+uHgT/yrExC/NE7/Gxe9O985dubtC3vdkiylurusy/FGNT7fCo4dX9KFH9IaRaBaMXiIyQgG/cl/xHNLqXL0ZFr+8VnM3ann8DAJT78UDHjvBZypJHEmNuqB/Fclo8mK0Mi24+w2"
    it should be
    Code:
    default._domainkey.kameleon.fr. 600 IN TXT    "v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKIFt176rW+/tmeS0wy6+uHgT/yrExC/NE7/Gxe9O985dubtC3vdkiylurusy/FGNT7fCo4dX9KFH9IaRaBaMXiIyQgG/cl/xHNLqXL0ZFr+8VnM3ann8DAJT78UDHjvBZypJHEmNuqB/Fclo8mK0Mi24+w2"
    And you are still missing the DMARC record.
     
  14. kameleon1er

    kameleon1er Member

    I just realized that I have installed ispConfig with "srv-b.democrasite.com" by default. I don't think it's a problem, but I prefer to use this domain for mail management, I recreated everything under "democrasite.com" if I didn't make a mistake.
    Code:
    $TTL 86400
    @    IN SOA dns200.anycast.me. tech.ovh.net. (2020091914 86400 3600 3600000 300)
                 IN NS     ns200.anycast.me.
                 IN NS     dns200.anycast.me.
             600 IN MX     1 mails.democrasite.com.
                 IN MX     5 redirect.ovh.net.
                 IN A      163.172.143.149
                 IN TXT    "default._domainkey.democrasite.com. 600   TXT   v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmcV6/lmbB5QjazI/af5dY61OIAAoo/lzFqIHqrcm4o039bqQPTGB7S4qrRrDwtFRldj5ZQvVoBE3kJnlEt19cWZS7no2FvnfDq//S5NF6d3OIgo4soT3Y3EHwnKLmqESCc4GLRtBmEGd/B+gy"
                 IN TXT    "1|www.democrasite.com"
             300 IN TXT    "democrasite.com_dmarc;v=DMARC1:p=none;[email protected]"
             300 IN TXT    "v=spf1 a mx ptr ~all"
    mails        IN A      163.172.143.149
    srv-b        IN A      163.172.143.149
    www          IN MX     1 redirect.ovh.net.
    www          IN A      163.172.143.149
    www          IN TXT    "l|fr"
    www          IN TXT    "3|welcome"
     
  15. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    I just queried the records and it seems fine.
     
  16. kameleon1er

    kameleon1er Member

    hi @Th0m , thanks. But I still have an issue with rDNS and I don't find the way to fix it and to understand it. So i still have error with mails_checkers.
    My installation is on a VPS instance @ scaleway ; seems like droplet's Digital ocean. I nommed this instance : srv-b.democrasite.com as my hostname in ispConfig, maybe the first mistake…

    Anyway, if I follow intsructions to find the reverse adress ;
    Code:
    $ dig +noall +answer -x  163.172.143.149
    149.143.172.163.in-addr.arpa. 60 IN    PTR    149-143-172-163.instances.scw.cloud.
    I don't know where to enter this value.
     
  17. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    You have to set the reverse DNS in the scaleway interface.
     

Share This Page