Issues with "ALL" Gmail

Something needs fixed in CWP that will allow spf/dkim to work with other domains. It will NOT work with my .cf and .tk domains I have.

<xxxxxx@gmail.com>: host gmail-smtp-in.l.google.com[142.250.102.27] said:
    550-5.7.26 This mail has been blocked because the sender is
    unauthenticated. 550-5.7.26 Gmail requires all senders to authenticate with
    either SPF or DKIM. 550-5.7.26  550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass 550-5.7.26  SPF [upward.cf] with ip:
    [xxx.xx.xxx.xxx] = did not pass 550-5.7.26  550-5.7.26  For instructions on
    setting up authentication, go to 550 5.7.26
    https://support.google.com/mail/answer/81126#authentication
    w27-20020a170906131b00b00a1dbd55636dsi190086ejb.801 - gsmtp (in reply to
    end of DATA command)

SPF and DKIM are part of CWP, but you have to configure it.

admin/index.php?module=dkim


/admin/index.php?module=spf

/admin/index.php?module=postfix_manager

Check the box to enable for all new accounts.

admin/index.php?module=dkim


/admin/index.php?module=spf

/admin/index.php?module=postfix_manager

Check the box to enable for all new accounts.

Yes I know this and is done already but every email I send from my server to gmail get bounced with that message. So there is n9othing in spf/dkim config to change this. Been through the settings a hundred times now.

Post one of your domains that's having trouble.

I grabbed upward.cf from the original post.

Results from dig TXT upward.cf resulted in NO text records

https://easydmarc.com/tools/dkim-lookup?domain=upward.cf

Shows NO dkim records.   


After doing some other investigation, you are not using your CWP for your DNS nameservers.  Therefor you would need to copy the SPF and DKIM records over to your nameservers in order for anything to work.    If you want everything to work automatically, you would need to use your CWP as your primary nameserver and setup a secondary that receives updates from your CWP.

I grabbed upward.cf from the original post.

Results from dig TXT upward.cf resulted in NO text records

https://easydmarc.com/tools/dkim-lookup?domain=upward.cf

Shows NO dkim records.   


After doing some other investigation, you are not using your CWP for your DNS nameservers.  Therefor you would need to copy the SPF and DKIM records over to your nameservers in order for anything to work.    If you want everything to work automatically, you would need to use your CWP as your primary nameserver and setup a secondary that receives updates from your CWP.

I can add records such a A, TXT and etc using Freenom's DNS Manager but I am clueless what I would need to add since I use their dns/nameservers.

Your best bet would be to setup private nameservers  Freenom unfortunately doesn't have any help articles on how to do it, and I have never used them.  But if you go to the domain, and select nameservers, there should be an option for "Private Nameservers" where you can put both ns1.mydomain.com and ns2.mydomain.com with your servers IP.  Then set any domain you host to ns1.mydomain, ns2.mydomain.com as their nameservers as well.

If a video I just watched, you can register ns1 and ns2 for your domain name by clicking on Management Tools -> Register Glue records

add ns1  ->  Your server IP
add ns2  ->  Your Server IP

Next go to your domain.  Change the nameserver to ns1.yourdomain.com  and ns2.yourdomain.com

Finally.  In CWP Root.  Goto DNS Functions -> Edit Nameserver IPS

Change those to NS1 and NS2 of the domain you just did in freenom, and don't forget to change the IP's to your servers IP As well.   

Once your main domain resolves, you can safely change the nameservers of every other domain hosted on your server

Just a side note Mate.  You might want to transfer your domain away from Freenom before you lose it.  They were sued by META in March, and won't be able to renew it when that time comes.

Your best bet would be to setup private nameservers  Freenom unfortunately doesn't have any help articles on how to do it, and I have never used them.  But if you go to the domain, and select nameservers, there should be an option for "Private Nameservers" where you can put both ns1.mydomain.com and ns2.mydomain.com with your servers IP.  Then set any domain you host to ns1.mydomain, ns2.mydomain.com as their nameservers as well.

I had my servers nameservers set for a long time and then all of a sudden my sites would not come up anymore unless I used freenom's nameservers.

Just a side note Mate.  You might want to transfer your domain away from Freenom before you lose it.  They were sued by META in March, and won't be able to renew it when that time comes.

Freenom owns the domains, they are free domains offered by freenom's service. The .cf, .tk, .gl are free domain names. You can't transfer them anywhere because they own them.

On that note, I certainly wouldn't use a free domain I don't own for a production server.  Go register a .com to be your main domain and setup nameservers with a reputable company where you OWN your domain name.

.tk domains are great for free test sites, but are useless for setting up servers.

Once you have a regular domain name, registered your DNS names, and given your server a sub-domain name, you can point the free domain to that and setup sites.

If a video I just watched, you can register ns1 and ns2 for your domain name by clicking on Management Tools -> Register Glue records

add ns1  ->  Your server IP
add ns2  ->  Your Server IP

Next go to your domain.  Change the nameserver to ns1.yourdomain.com  and ns2.yourdomain.com

Finally.  In CWP Root.  Goto DNS Functions -> Edit Nameserver IPS

Change those to NS1 and NS2 of the domain you just did in freenom, and don't forget to change the IP's to your servers IP As well.   

Once your main domain resolves, you can safely change the nameservers of every other domain hosted on your server

Hi, may i ask you a thing about using the own dns servers?

I am actually not using my own dns servers and add all records to my domain hoster, it is working well for me but the reason i did it that way is because i thought if i wanna use my own dns servers, i need to open port 53 in/out and this could be a risk because everyone could use my DNS servers.

Am i wrong with this thoughts or would i really need to open port 53?

Thanks