Hi all,
It is working perfectly with Andy’s smarthost: send & receive.
Michel-André
Hi Michel-André
As I assumed here
The problem is / was a DNS / IP reputation issue. A smarthost will solve this easily - however that’s not always the needed / wanted solution. Using a smarthost is common for people with a mailserver at home.
Using external mail server and smarthost is also a good solution for companies / institutions with lower bandwidth options than really needed / required, or attack-prone companies.
With external mail server, it’s much more difficult to cause a DDOS attack, as the attack will be on the hoster, not the company/institution WAN address…
My 2 cents
Andy
1 Like
Good morning all,
Thank you for your help, and the work of Michel André on the server.
Andy, I will follow this procedure, https://www.dmarcanalyzer.com/how-to-create-a-dmarc-record/
I admit I don’t understand what could have happened, I will do a full install on another server.
Thank you to all of you.
Frederic
Salut Frederic
This should work…
Also use thee links I sent earlier, to check basic mail stuff, also SPF, and if you’re blacklisted.
Most likely your situation was caused by several factors, some maybe beyond your control or knowledge.
That’s not something bad. Even a champion needs to learn to use his talent, some take longer, some take less. Rome wasn’t built in a day…
You can migrate (Backup / Restore) any data you might have on the server.
If you need help, you know where the helpful forum is… 
Good Luck
Andy
2 Likes
Thank’s a lot.
Have a nice day
Frederic
1 Like
sorry @frederic if you thought we were kidding of you, it is not true, we do support for fun, not for much 
I do use also at home a smarthost because I have other hobbies to make my email accepted by Microsoft…they are a kind of f… people
1 Like
for your knowledge we have a howto relative to email and all dns weapon that big server company might require if you want to send them an email
https://wiki.nethserver.org/doku.php?id=email_protection_resources
3 Likes
Good evening Stephdl,
Yes of course I saw it, sorry for yesterday (I thought I was being spammed)
Thanks for your help again.
I am reinstalling a server and I will take your advice on the howto.
Have a nice evening.
Frederic
https://wiki.nethserver.org/doku.php?id=email_protection_resources
If you are virtualizing the NethServer install make sure you take a snapshot before any major changes so you can restore your VM back to a working state in a matter of seconds. This has saved me days of work and allows me to break things with confidence knowing I can easily go back in time.
Hi Royce and thank you,
In fact I keep this server and I mount another I make a backup, and after I tinker with it.
It’s no big deal if I break everything.
Thank you anyway and good evening
Frederic
Salut Frederic
I would definately also suggest using a Hypervisor and virtualize your NethServer. Most here now use Proxmox underneath, see here for a few ideas:
https://wiki.nethserver.org/doku.php?id=userguide:nethserver_and_proxmox
I also use Nethserver at home, running in a 8 year old HP Proliant ML110 G6 with 16 GB RAM. All my clients running NethServer do so virtualized, long term peace of mind!
My 2 cents
Andy
Hi Andy,
I’ll watch this soon.
my server is at home but it is just for protection, I am not a pro I only use it for my emails and site but just for fun, I started a lot of time ago.
Thank you for all, see you soon.
Frederic
1 Like
Good morning all
I come back to you, again.
I have reassembled a new server, and I have the same problem with emails not going.
The tests were done with 2 different Fai, so 2 different external IP.
Test with Dkim and without even problems.
The configuration at Gandi
@ 10800 IN A 82.65.81.211
@ 10800 IN MX 10 mail.fio01.com.
@ 10800 IN MX 10 smtp.fio01.com.
@ 10800 IN MX 50 smtp.fio01.com.
@ 10800 IN MX 50 smtp.pontdesvents.fr.
@ 1800 IN TXT “@ 10800 IN TXT” “v = spf1 a mx -all”
@ 1800 IN TXT “v = DMARC1; p = none”
@ 1800 IN TXT “v = spf1 a: fred.fio01.com mx: mail.fio01.com ip4: 82.65.81.211/32 ~ all”
@ 1800 IN TXT “google-site-verification = G_wRSQy30ElOYRFfA”
@ 1800 IN TXT “v = DKIM1 k = rsa; p = + MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YflmDziJ60TJHbr7YjADaOWxqG 6LbY2n96vuTWD8XuALyDQ1qHJKcNTSjRxfwPyS6QMBp / 5fvPtTJovUn0Kkxh” “NggUYW0ycrqHUtOA1Pw5yORg53OmKytLWnsfnfIpZZ + D71jXH7r35otEUL6InFoeC2XQOD5 / NdLweCc3rL6Uy / 3nO7 G5ZMM1nU1jo2uWuOaDV + n90 + + + WE2yVbkJtich qj1QrlUd4lvC / UEqA / rhWN” “cs1IVG1WDRRWIOShwwOFAZmCQFa / mL7sDyHiJau19CLihaNwaKK2kbA7BU6DsxM2zO2ihh5iz5q7D7OnxS56IqEhwyOFNeKGaiRMFDrwIDAQAB”
fred 1800 IN CNAME @
ftp 10800 IN A 82.65.81.211
https 10800 IN A 82.65.81.211
mail 10800 IN A 82.65.81.211
smtp 10800 IN A 82.65.81.211
wpad 10800 IN A 82.65.81.211
www 10800 IN A 82.65.81.211
I don’t understand what I am missing?
It seems the reputation of your server is bad, please follow https://wiki.nethserver.org/doku.php?id=email_protection_resources to enhance it
The correct way to enter DNS records.
@ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1597694635 10800 3600 604800 10800
@ 10800 IN A 82.65.81.211
@ 1800 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YflmDziJ60TJHbr7YjADaOWxqG+6LbY2n96vuTWD8XuALyDQ1qHJKcNTSjRxfwPyS6QMBp/5fvPtTJovUn0Kkxh" "NggUYW0ycrqHUtOA1Pw5yORg53OmKytLWnsfnfIpZZ+D71jXH7r35otEUL6InFoeC2XQOD5/NdLweCc3rL6Uy/3nO7+G5ZMM1nU1jo2uWuOaDV+n90+WE2yVbkJtich+qj1QrlUd4lvC/UEqA/rhWN" "cs1IVG1WDRRWIOShwwOFAZmCQFa/mL7sDyHiJau19CLihaNwaKK2kbA7BU6DsxM2zO2ihh5iz5q7D7OnxS56IqEhwyOFNeKGaiRMFDrwIDAQAB"
@ 1800 IN TXT "v=DMARC1; p=none"
@ 1800 IN TXT "v=spf1 a:fred.fio01.com mx:mail.fio01.com ip4:82.65.81.211/32 ~all"
fred 1800 IN CNAME @
ftp 1800 IN CNAME @
https 1800 IN CNAME @
mail 1800 IN CNAME @
smtp 1800 IN CNAME @
wpad 1800 IN CNAME @
www 1800 IN CNAME @
The SOA record is entered by the registrar itself ?
I never used this record before.
@ 1800 IN TXT “google-site-verification = G_wRSQy30ElOYRFfA”
Michel-André
Hello and thank you for the answers,
the reputation comes from the IP or the domain name?
I tried with 2 different external IP with 2 servers.
https://www.mail-tester.com/test-tlkbs9qoy
the control site talks about Dkim which is not valid
Bonjour Michel,
here is the config at Gandi, currently
@ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1597740770 10800 3600 604800 10800
@ 10800 IN A 82.65.81.211
@ 1800 IN TXT “v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YflmDziJ60TJHbr7YjADaOWxqG+6LbY2n96vuTWD8XuALyDQ1qHJKcNTSjRxfwPyS6QMBp/5fvPtTJovUn0Kkxh” “NggUYW0ycrqHUtOA1Pw5yORg53OmKytLWnsfnfIpZZ+D71jXH7r35otEUL6InFoeC2XQOD5/NdLweCc3rL6Uy/3nO7+G5ZMM1nU1jo2uWuOaDV+n90+WE2yVbkJtich+qj1QrlUd4lvC/UEqA/rhWN” “cs1IVG1WDRRWIOShwwOFAZmCQFa/mL7sDyHiJau19CLihaNwaKK2kbA7BU6DsxM2zO2ihh5iz5q7D7OnxS56IqEhwyOFNeKGaiRMFDrwIDAQAB”
@ 1800 IN TXT “v=DMARC1; p=none”
@ 1800 IN TXT “v=spf1 a:fred.fio01.com mx:mail.fio01.com ip4:82.65.81.211/32 ~all”
fred 1800 IN CNAME @
ftp 1800 IN CNAME @
https 1800 IN CNAME @
mail 1800 IN CNAME @
smtp 1800 IN CNAME @
wpad 1800 IN CNAME @
www 1800 IN CNAME @
Salut Frederic,
Verify the DKIM, if you use a different server than the original, the DKIM is different.
Michel-André