Get Social

SMTP PTR error ipv6 authentication error (Vesta CP with Exim)

I tried to send an email to gmail on my Debian server (with the Vesta panel installed). I received this error:

 SMTP error from remote mail server after end of data:
 host gmail-smtp-in.l.google.com [2a00:1450:400c:c01::1b]:
 550-5.7.1 [2001:41d0:8:e974::1] Our system has detected that this message does
 550-5.7.1 not meet IPv6 sending guidelines regarding PTR records and
 550-5.7.1 authentication. Please review
 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_error for more

Thus, I need to add a PTR record for my ipv6 address. However, not all providers provide such an opportunity. The easiest way to solve this issue is by disabling ipv6 in the mail system.

First, I checked:

netstat -tulpn | grep :25
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      17919/exim4     
tcp        0      0 0.0.0.0:2525            0.0.0.0:*               LISTEN      17919/exim4     
tcp6       0      0 :::25                   :::*                    LISTEN      17919/exim4     
tcp6       0      0 :::2525                 :::*                    LISTEN      17919/exim4

Then I opened Exim configuration file:

nano /etc/exim4/exim4.conf.template

I put a ban on ipv6 (disable_ipv6 = true) before the begin acl section as shown below:

######################################################################
#                       ACL CONFIGURATION                            #
#         Specifies access control lists for incoming SMTP mail      #
######################################################################

# disable ipv6
disable_ipv6=true

begin acl

Then I saved the changes and restarted Exim:

/etc/init.d/exim4 restart

Checked:

netstat -tulpn | grep :25
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      18286/exim4     
tcp        0      0 0.0.0.0:2525            0.0.0.0:*               LISTEN      18286/exim4

all is ready!

How to install and configure the simplemachines (smf) forum on Debian

1. Go to the official site and download the forum source here:
http://download.simplemachines.org/

and the language you need is here:
http://download.simplemachines.org/?smflanguages;lang=russian
(Only you need to be careful when choosing an archive with a language – there are different encodings)

2. Then, we place it all on our hosting.

3. Then, following the guidelines http://wiki.simplemachines.org/smf/Installing
create a database and a user (you can do this in the console, or – in phpmyadmin):

mysql -u root -p
CREATE DATABASE forumdb;
GRANT ALL PRIVILEGES ON forumdb.* TO "userdb"@"localhost" IDENTIFIED BY "pass";
FLUSH PRIVILEGES;
EXIT

4. Unpack the forum in the target folder on the server:
mkdir /var/www/forum.example.com
cd /var/www/forum.example.com
tar -xzvf smf_2-0-x_install.tar.gz
tar -xzvf smf_2-0-y_russian.tar.gz (or smf_2-0-y_russian-utf8.tar.gz)

5. Create and edit a configuration for Apache:
nano /etc/apache2/conf.d/forum.example.com.conf

<VirtualHost *:80>
ServerName forum.example.com
ServerAlias www.forum.example.com
DocumentRoot /var/www/forum.example.com
<Directory "/var/www/forum.example.com">
AllowOverride All
Order deny,allow
Allow from all
AddHandler application/x-httpd-php .php .html
</Directory>

6. Verify the configuration and start the installer:
We check whether the configuration file was made correctly:
apachectl configtest
if there are no critical errors – gently restart Apache:
apachectl graceful
Now open your forum in the browser:
http://forum.example.com/install.php

7. Next – follow the instructions of the web installer.

8. Done!

Free s/mime certificate from startssl

I wanted for my site to get free ssl to use https. A search on the net brought me here:https://www.startssl.com/. After registration, I got it, but it’s a completely different story … By the way, it turned out that it was very easy to get a s / mime certificate for your mail (no matter which domain).

How to get a free s/mime certificate?

First, in your account, you need to check your email with the Validations Wizard:

a notification will be sent to the email

After that in “Certificates Wizard” you can choose “S/MIME and Authentication Certificate” and get it.

It is saved in the browser automatically, and it needs to be imported for use in mail client.

p.s. to build a chain your mail client may need (for example, I have kmail / kleopatra) StartCom CA Certificates. It’s enough to go to the Toolbox tab and download everything that’s there and then import it into the mail client / certificate manager.

update. In 2016, there were problems with ssl from this company. Perhaps, it is better not to use them. In any case, it’s better to check everything.