Configure CyberPanel DNS and Secure Email Server: Part 3 of 4
Vložit
- čas přidán 21. 07. 2024
- If you have ever wanted to host your own websites and e-mail, but didn't want to pay for alternative hosting control panels such as CPanel or Plesk, then learn how to get started with CyberPanel in this 4-part series. CyberPanel is a free Hosting Management Panel that you install on your own server. This can be your own home server, dedicated hosted server, or a virtual private server (VPS). CyberPanel makes it easy to setup the proper DNS records (MX/SPF/DKIM) to help reduce the possibility of your outbound mail landing in your recipients spam. It also provides free SSL Certificates via LetsEncrypt. Those certificates secure your website, CyberPanel admin page, and your e-mail server (SSL/TLS/STARTTLS) .
What can you do with CyberPanel and this series of tutorial videos?
- Host your own free email server - SMTP/IMAP/POP3 - Secured with TLS
- Easily install a high performance web server for Wordpress
- Host multiple domains, subdomains, websites
This video is part 3 of 4, and covers the following topics:
00:00 - Intro
0:41 - Update CyberPanel admin account
2:12 - Create a root website for web and e-mail
4:02 - Configure NameServers in CyberPanel
5:04 - Review DNS Records
6:09 - Run DNS check
6:52 - Enable SSL on the mail server
8:14 - Create an e-mail account
9:00 - Get e-mail server details for 3rd party mail clients
10:14 - Test mail using Rainloop webmail
13:08 - Run mail-tester.com test on mail server
15:08 - Configure and test Thunderbird with SSL/TLS enabled protocols
Blog Post: dimensionquest.net/2022/02/cy...
Disclaimers:
=================================================================
Please note all non-English Subtitles are auto-translated.T
his video was NOT sponsored by any vendor. Any paid products/services shown were paid for out of my own pocket.
If you wish to support this channel:
Feel free to tip me here ko-fi.com/DimensionQuest
The following are PAID affiliate links. Any revenue generated via the links below will help pay for systems and services used in the hosting and production of my content:
=================================================================
RackNerd VPS: bit.ly/dqRackNerd
Domain Registration, CPanel Shared Hosting, VPS, SSL via NameCheap: bit.ly/dqNameCheap
== My Gear - #AD Amazon Links:
As an Amazon Associate, I earn from qualifying purchases.
USB Capture Device: amzn.to/3NFvdpR
Standing Desk: amzn.to/3hBXFJG
34in Monitor: amzn.to/3HBCwKj
Thunderbolt 3 Dock: amzn.to/36W7YXb
== Workstation Build:
Full Tower Case: amzn.to/3vqJtKM
MB: amzn.to/3WSpNuY
CPU: amzn.to/3jCvij4
Cooler: amzn.to/3i1gyJW
Memory: amzn.to/3WQtBg5 (X2 for 128GB)
GPU: amzn.to/3G2f5v8
PSU: amzn.to/3PY54nf
Cache (nvme): amzn.to/3vn1qd2
OS (nvme): amzn.to/3vnDUwr
Data (SSD): amzn.to/3C9Ae5e (X2)
Keyboard: amzn.to/347VfPA
Mouse: amzn.to/3C8KzgH
Microphone: amzn.to/3JD4Myv - Věda a technologie
You saved me man I had issue with sending mails to gmail but after following all your steps it's working like charm. Thanks buddy
Glad to hear that!!
Wonderful. Thanks for uploading such a detailed guide!
Glad you enjoyed it!
Thanks for these videos super easy to follow along!
Thanks! I appreciate hearing that!
Thanks for the great tutorial. Perfect guide for setting a professional service to any customer. Here's a hint for a future post: how to serve email for different domains on same VPS (currently struggling with SMTP authority for unique PTR record at VPS level). Great job though!
I've actually been wondering about that myself.. I've used numerous providers in the past for my hosting/mail services. They all provided me with a control pane (CPanel, Plesk, Custom, etc..) and the server had MANY domains beyond the several that I hosted with them. Since they are typically shared hosting, all those domains had a shared IP address so having PTR records for every domain would not be possible. With that in mind, it seems to me that it can't be a dire requirement.
In any case, thank you very much for the kind words and taking the time to post a comment.
@@DimensionQuest Well I've been struggling with Hostinger VPS + CyberPanel where its implied that a single hostname must be set for rDNS. The issue is when I set a new mail server for a different domain than the hostname provided as PTR: all sent emails are delivered to SPAM inbox. MXTools points me to the right direction when it says it's a PTR issue. I'll invest some more time cracking this and will share the solution when I find it.
Really helpful video. I am trying this approach because a Cloudflare full strict setup still gives me incomplete certificate chain no mater how I set it up. Your approach is a lot less work and its fully inegrated with Cyberpanel, which is great. Thank you for such a useful video. I will post it on Cyberpanel's Discourse in reply to my own question, which is still unanswered.
Good luck! I've seen quite a few comments here and in the CyberPanel communities around issues with CloudFlare. I guess it will be challenging in any case, but the extra security/protection features that CloudFlare brings to the table are worth the extra effort - if you can get it to work :D
Thank you very much for the tutorial
. well explained
You are quite welcome! Thank you very much for taking the time to comment ;)
Your last 2 videos have been amazing, really like the breakdown of each step and the blog to follow along. Q: I already have Cloudfare as my DNS, is it wise to integrate it with cyberpanel as well?
This really boils down to how often you need to make DNS updates. If it is for your own personal stuff without a lot of updates, you're probably best off keeping Cloudflare as your DNS and just pointing relevant records to your CyberPanel as needed. I have never looked into the integration personally so I can't offer any more specific advice.
When I send an email I get an Undelivered Mail Returned to Sender. Any fix for this?
Awesome, thank you. But Second, third domain(web site) and reversedns?
Reverse DNS can only be set for one domain. Consider any of the major shared website hosting providers: HostGator, Namecheap, and the thousands of others using CPanel, Plesk, CyberPanel, etc... each of their servers hosts 10s - 100s of domains, providing web, e-mail, etc... all from a single IP each. Hosting/E-mail does not require a dedicated IP/Reverse Lookup entry for every domain hosted.
Thanks for watching and taking the time to comment :)
Hi, there. I want to ask about the content from your video, is it a must to create nameserver from the cyberpanel? because i use NS from cloudflare.
No, it is not a must. You can certainly use any 3rd party NS you like. CF is a very popular one for sure. You'll just need to make sure to add entries in CF each time you create new things in CyberPanel. The built-in bits in CyberPanel simplify the record creation, but it doesn't give us the same stability, security, etc.. that CF offers.
Could you please make a part of the video saying how you setup your domain registrar's information (whatever provider)? Did you simply just setup the nameservers for the domain? What exactly did you do to get the domains pointed and working to the cyberpanel instance?
Please watch the first video in this series: Reinstall OS on RackNerd VPS for CyberPanel: Part 1 of 4, specifically, right here: czcams.com/video/U6-GMrZousg/video.html . I show the exact steps I took in my Registrar - google domains.
@@DimensionQuest Thank you, that is awesome :) I got my server working
Great! Happy to hear that!
friend, i am using cloudflare on my server.
In the case of the nameservers that in my registrar I pointed to cloudflare, what would it be like?
I got a little confused.
Hello Pablo, thank you for watching my videos and taking the time to comment. I have not done any work with CyberPanel + Cloudflare yet. I have seen a lot of people appear to have challenges in this area. I have also seen that within CyberPanel, there is an option to synchronize DNS records from CyberPanel's DNS to Cloudflare - you need to create an API key for the DNZ Zone you wish to sync records to and include that in your CyberPanel Config. Again, I have not personally done this so you'll need to seek those details out in the docs, CyberPanel Community, or other people's videos. Good luck!
Awesome tutorial! But I got a problem. I did all the steps that you show on your video, and my email server sends emails correctly, but I'm not receiving for some reason. Could you have some idea about it?
It's really hard to know for sure. Most commonly, the mail ends up in the Junk Mail/SPAM folder due to something not be validated somewhere. Even when everything is aligned properly, you can still end up with issues if your mail server's IP address has been flagged somewhere (or even the CIDR block your IP belongs to) for someone abusing (IE: Spamming, etc...)
Hello buddy, thank you so much for the informative content. I am sorry for the selfish question here, however I have a problem with mailserver SSL where all the SSL has been self-signed when issued. SSL works correctly for domain names, clouflare records are set up correctly I am just wondering if you have ever ran into the same issue ?
Greetings Grégori, no I haven't run into that issue.. My VPS is not currently behind Cloudflare and the records aren't there either... CyberPanel uses HTTP based validation for the LetsEncrypt certificates. The mail server needs a CyberPanel "website" to associate with. Did you do the steps at the 6:52 mark in the video?
@@DimensionQuest Thank you so much for your answer, after multiple trials I have found the solution. It looks like these 2 commands were the reason to issue a correct SSL so I am dropping them here in hope it help someone.
postmap -F hash:/etc/postfix/vmail_ssl.map
systemctl restart dovecot && systemctl restart postfix
now SMTP has SSL certificate and connect as expected through port 587.
Farewell dear friend : )
Thanks for sharing you solution here. Hopefully it helps others :)
I have an interesting question, who manages your web domain, because if you create DNS independent of your domain provider when creating SSL, Google will mark it as insecure, I await your response, greetings
As noted in my video, my domain(s) are registered with Google: domains.google.com ... I don't get how/why Google would mark a domain as insecure unless something isn't setup correctly in DNS.
ty man for share 🤙
No problem 👍, thanks for watching
I set up my server email exactly as you did in this video , but unfortunately my emails don't going in or out . what's the problem ?
First thing that comes to mind is firewall ports at the provider level.
Hi! Thanks for your video! My emails always go to spam Gmail how did you fix that?
I don't know what to say there... Perhaps your IP or the subnet you're on has poor reputation, resulting in the spam scores landing messages in the GMAIL spam folder. I'm not sure how that can be fixed, it's a bit beyond my general experience. Good luck though!
@@DimensionQuest thanks! Yes, I am pretty sure Google detects the ip as a threat. I think the best way would be using cloudflare email redirection fir incoming and smtp google for outgoing
hi. after installing cyberpanel and load it at port8090 i get a 503 error. how fo you advise? am stuck.
503?? odd, I haven't come across that in the few times I installed Cyberpanel. You may want to try the Cyberpanel communities for support: community.cyberpanel.net/search?q=503
thanks, the only problem is my outgoing emails are going to spam folder.
Did you do the mail checker bit to see if there is a mismatch or anything? I’m not too sure what else to do there.
followed all step yet email never sent. I used cloudflare domains., perhaps the domains registrar also counts
Cloudflare seems to be quite special, please visit this thread if you haven’t already: community.cloudflare.com/t/cant-get-my-cyberpanel-to-send-smtp-trafic-thru-cloudflare/350062 . Hopefully that helps you out…
When I am looking up my DNS using DNS checker.... everything is masked by cloudflare except the MX records.
Attackers can easily see my origin IP through my MX records.
How to remove/mask my origin IP from MX records?
I don't know enough about CloudFlare to answer this or even know if it is possible. I've seen in some of the self-hosting Reddits that many people get a low cost or free VPS and use that as the endpoint for DNS entries so that their self hosted things at their home IP does not expose the home IP. The only exposure is the VPS IP.
@@DimensionQuest did a lot of research after posting that question.
Not possible.
You cannot mask your MX records.
i did everyting but when i sent mail via webmail in cyberpanel, i am still seeing "No encryption" message in my gmail. Please Help ! What could be went wrong ? my mail-terter result is 8.9/10
I'm not sure what "No encryption" message in gmail means.. I've not seen this so I don't quite understand what the issue is. I even checked back on the e-mails I received in my gmail account from my CyberPanel account and don't see any message about encryption. Even clicking the option to view original (shows all mail headers in gmail) didn't show any such message. How/Why is your result only 8.9/10? were you able to fix that up and get it to 10/10?
Thank u
No problem
Make a video how to setup dns of this with cloudflare
It may take a while, if I ever decide to move my DNS over to CloudFlare... I've made a note. Thanks for the suggestion.
What VPS allows outbound traffic on port 25
I provide a link to the provider I use in my CyberPanel series. Outbound traffic isn't usually the problem. Most sites/systems need the ability to send notification e-mails outbound (IE: Wordpress updates, ticketing systems, password reset notifications for communities/forums software, etc...) Even the providers the block inbound mail ports by default may open them upon request.
@@DimensionQuest thanks for the explanation I must have missed it in the video. Reason I mention is because I'm curr using Linode and asked about that. Which they responded with quite a bit of an explanation and justification for allowing me to do it.
I had the same issues before watching the videos here, I have to send a request trou the vps provider and they opened the port for smtp and port 25 for traffic, even thou my firewalls was set for the port 25 for inbound and outbound , I was still getting errors from reversed dns, I suggest contact your vps provider for rdns troubles, I went trou to many tutorials and search about dozens of sites, in the end I came with a post from a website suggested tot ake to your dns provider and the dns provider told me to contact my vps provider and I got everything done trou it
rainloop not found any ideas?
Check your install summary details, I recall reading that rainloop was replaced with a forked copy…
@@BurkeAzbill thanks, i just did a cyberpanel upgrade it all works now :D
How i can build a compain
I stopped using CyberPanel shortly after producing the video series. Even when I used it, mass mailing or campaign was never in my interests so I can’t answer this one. You’re better off using the CyberPanel community. Good luck and thanks for watching.