#dev 2026-04-08
2026-04-08 UTC
troojg, grufwub, lockywolf, dabeglavins, doesnm_, kishy, srazkvt, thegreekgeek__, ax562, blacklight, WinnerWind, geoffo, jeremy, barnaby and duanin2 joined the channel
# 
[Kupietz] Replying to exxxxxx…. Set spf/dkim/Dmarc NOW. It’s too late to change emails that are already sent, but you can fix it going forward, and should do so immediately
# exxxxkc yeah i fixed now
# exxxxkc and i saw some mail rejected the email
# exxxxkc which good
# exxxxkc but alot of aint
# [Kupietz] Cool. That should take care of it, that’s really about all you can do. Sending email from someone else’s domain is extremely easy if that’s not set up
# exxxxkc yeah but the ip got fallen in some spam list
# exxxxkc i will need to explain to vps provider
# exxxxkc and that is my issue
# [Kupietz] Well, just because it was sent from your domain doesn’t mean it was sent from your mail server. They just stick your domain in the return address.
# [Kupietz] If they actually managed to relay through your mail server, do you have a different and more serious problem.
# exxxxkc i use stelwart
# exxxxkc > If they actually managed to relay through your mail server, do you have a different and more serious problem.
# exxxxkc not too sure on that
# [Kupietz] You might be able to apply to the blacklist that blacklisted your IP, if your mail servers like he really did get blacklisted, and ask for them to re-examine it. When they see you’ve closed the security hole that might help. These things happen.
# exxxxkc the issue is the vps provier aint too happy when they see compain
# exxxxkc bc that has happented twice
# [Kupietz] Who hosts your email? Are you hosting your email yourself on a vps?
# exxxxkc i was doing it on vps provider
# exxxxkc maybe it will be easiler if i have my own asn
# exxxxkc self handling aduse complain lol
# [Kupietz] I gotta be honest with you, my two cents is, never host your own email. I’m generally big on self-hosting, but I feel like email service is too fraught with risks, exactly for reasons like this.
# [Kupietz] It’s worth paying somebody else to do it who does it for a living, one of the hosting companies.
# exxxxkc lol
# [Kupietz] If you host yourself and this happens again, yeah, you’ll feel the complaints, but your IP address will still end up on black lists. Email reputation is becoming important.
# [Kupietz] Sp “field the complaints”
# exxxxkc the issue is the my vps provier got 2 complained from the sam provdier that isnt helpfull in provider data
# [Kupietz] Were you able to get a hold of one of the copies of the emails that was sent from your domain? Can you see the headers and determine if it went through your server, or if they just spoofed the From address?
# exxxxkc the issue is the my vps provier got 2 complained from the scam list provdier that isnt helpfull in provider data
# exxxxkc yeah i can see the header
# exxxxkc so let me give more info
# exxxxkc i notice it is happtening is bc the vps told me they got a complain
# [Kupietz] You gotta have your smtp server set up not to act as an open relay. That will get you abused and then blacklisted.
# [Kupietz] Who’d they get a complaint from? Spamcop?
# exxxxkc Spamcop yeah
# exxxxkc they are nice to give me the header
# exxxxkc but that wasnt too lucky from other 2 complain
# exxxxkc not much info was giving
# exxxxkc they end up blocked my ip and suspended my vps
# [Kupietz] Well, Spam cop sends two kinds of complaints: to domains that were mentioned in the email, and to the network admin of the IP address of the email was actually sent from. If it actually came through your smtp address, then yeah, you have bigger security problems, you need to lock that server down so nobody but you can send through it.
# exxxxkc i looked the header from em it aint
# exxxxkc since they aint suspended my account i was like why anot use my another running vps as mail server
# exxxxkc i make sure dmarc spf is seted up right
# exxxxkc but some email didnt upate that
# exxxxkc and some reject it
# [Kupietz] Oh, then proper SPF/DKIM/DMARC records should do the trick. Nowadays a lot of email hosts will block you for not having those even if a spammer isn’t abusing your domain.
# exxxxkc i can see that bc there are some email returning saying they are rejacing it
# exxxxkc some say they are reporting me
# [Kupietz] Yeah, sounds like somebody just spoofed your email address.
# exxxxkc yep twice
# [Kupietz] Or an address on your domain
# exxxxkc i dont how to explain lol
# exxxxkc *dont know
# [Kupietz] Well, it sounds like there’s nothing for you to do now. If you’ve got those rules set up now, you should be good to go. Write the blacklists and appeal the block, tell them to check again.
# exxxxkc yeah but my vps provider
# [Kupietz] Yeah, I don’t know what to tell you about that. Sounds like they’re being hard asses. You made a mistake, but you’ve fixed it now.
# exxxxkc well yeah but i think some email scam list sented a to em already
# exxxxkc which i will need to explain
# [Kupietz] Well, then you gotta explain it… You can’t change the past, the emails were sent already. Point out to them that you went in and immediately fixed the security rules, that all the help your case.
# [Kupietz] There’s absolutely nothing anyone can do about people spoofing their addresses on spams, it’s happened to me, it happens to everybody. All you can do is make sure you have those rules set up correctly on your DNS server so that receiving servers know to discard the spam.
# exxxxkc alr
# exxxxkc yeah one of email scam list requied u to pay money to get it remove
# [Kupietz] !!!!! That sounds like a scam to me. I have never heard of that before. It could be legit, I’m not an expert, but it sounds very suspicious to me.
# exxxxkc yeah they do ask ppl to pay em
# [Kupietz] Um. Forgive me for asking, but you are only sending your own personal/business legitimate emails with this server, right?
# exxxxkc yeah personal
# exxxxkc i do have some quirky email adress
# [Kupietz] Sucuri says UCEPROTECT is a scam. https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html
# exxxxkc well i love my vps provider
# exxxxkc lol
# exxxxkc jk ofc
# [Kupietz] It looks like Trend Micro might say the same thing, but they’ve managed to format their website so it’s unreadable on my phone https://success.trendmicro.com/en-US/solution/KA-0010167
# exxxxkc ah
# [Kupietz] Anyway, sucks that this happened, but you’re probably good if you have SPF/DKIM/DMARC Set up properly now. Just explain to whoever needs an explanation, show them you took steps to fix it, appeal any blocks, and don’t give anybody any money.
# exxxxkc yeah i didnt gave money to unproect
# exxxxkc yk spamhaus
# exxxxkc ik ms use it
# exxxxkc spamhaus sended to my vps provider once
# exxxxkc i think they will do that twice
# exxxxkc bc they flaged my second vps ip
# [Kupietz] You see that concerns me, because that sounds like somebody is using your server as a relay, which like I said as a more serious security issue.
# [Kupietz] That will definitely get you flagged, and any provider is going to shut you down for that if it keeps happening.
# exxxxkc yeah
# exxxxkc :/
# exxxxkc btw do u any thing about `Relay not allowed`
# [Kupietz] unfortunately I myself don’t know anymore about email security than I’ve told you… I don’t run an email server for these reasons. I don’t know how you can figure the security to avoid being used as a relay, although the DNS security rules alone should allow you to specify what IP addresses or domains are allowed to send emails through your server. But I don’t know the real tactical nuts and bolts of configuring SMTP se
# [Kupietz] security on a deeper level.
# [Kupietz] Sp technical nuts & bolts
# exxxxkc alr then fine if u dont know
# [Kupietz] Yeah, sorry.
# exxxxkc ig just need to wait for mo for dmarc to be update on diff mail server
# [Kupietz] That doesn’t take long at all. You can use http://mxtoolbox.com to check
# exxxxkc yeah it on my dns recond but some server might caheed that yk
# [Kupietz] If you wanna share your domain name I can take a look on MX toolbox for you
# exxxxkc `exkc.moe`
# exxxxkc i got rid the mx
# [Kupietz] Gimme a minute… Time to get out of bed I guess…
# exxxxkc it is fine it is on my dns recond
# exxxxkc googl has a tool to has they updated my dmarc
# exxxxkc google has a tool for telling me has they updated my dmarc
# exxxxkc > Last updated Mon, Apr 6, at 8:00 AM.
# exxxxkc from google
# [Kupietz] Yeah, your DMARC is good, but looks like you have some other DNS problem, and I don't see SPF and DKIM... gimme a sec
# IWDiscord <exxxxkc>
# [Kupietz] Yes, you have some problems. I'm just doing a very quick glance here on mxtoolbox, but your MX records appear to be absent, your SPF record has an error somewhere in it, and you have some other DNS problems.
# exxxxkc i got rid of it bc of the spam
# exxxxkc i mean mx
DirectX_KC joined the channel
# [Kupietz] MX tells other servers how to find your mail server to deliver email to you. You're going to need that to receive email.
# [Kupietz] Looks from those headers like it correctly rejected based on SPF. You need a DKIM record too.
# DirectX_KC like i said i got of mx bc of spam
# DirectX_KC DKIM hander is cropped off the screeshot
# DirectX_KC *from the
# [Kupietz] You're only blacklisted on one list that I can find right now, you're fine on a lot of the big ones... https://dnschecker.org/ip-blacklist-checker.php?query=107.175.156.164
# exxxxkc that isnt my ip
# exxxxkc noo
vriska joined the channel
# exxxxkc i missread
# exxxxkc sry
# exxxxkc yeah that is my ip of the vps
# exxxxkc well one of the vps
# exxxxkc i moved the mail part out
# exxxxkc so i aint ricking my other stuff
# exxxxkc that fun
# exxxxkc what i need the email on whois?
# exxxxkc alr thx then i k what to now
# [Kupietz] I looked at https://dnschecker.org/spf-record-validation.php and that's complaining about your SPF record as well, as well as the fact that you don't have that MX record. I gotta be honest, getting rid of the MX record is a little beyond me, I'm not sure that was a good idea but can't say for 100% sure. I've never heard of removing an MX record for security reasons, and I've always had them for all my domains that had email.
# [Kupietz] Ah, yeah, that http://matrix.spfbl.net's removal requirement are a little beyond me, TBH. But it's only one list.
# [Kupietz] I think if you fix the SPX record so these tools stop complaining about it, you should be mostly good to go. I honestly can't tell you if it's a big deal or not that you're still on that one list. But if nobody complains about you for a week, you might drop off. I dunno, that list is probably grounds for further research if you're concerned.
# exxxxkc yeah that ip is clean
# exxxxkc good
# exxxxkc well almost
# exxxxkc uh
barnaby joined the channel
# exxxxkc alr did some diging
# exxxxkc it spam as service
# exxxxkc they want ppl to use their for ads
# exxxxkc spammer want ppl to use their spam for ads
# exxxxkc they even make ads for themself via their spam
# [Kupietz] I also, BTW, don't know about that 418 "I'm A Teapot" error your site returns for http access... you could just redirect to https:// instead of returning an error. Some other folks around here could probably give you a better idea than I could about what the best way to handle that is, but my site does the redirect in .htaccess.
# exxxxkc it is funny i did
# exxxxkc it is a funny i did
# [Kupietz] It is funny, I'll give you that
# [Kupietz] But probably funnier to web developers than to an ordinary person trying to access your site 🙂
# exxxxkc many ppl use https?
# [Kupietz] Well, https has been around from the beginning... most people should be able to use it. But I don't know if everybody defaults to it, although most probably do.
# exxxxkc ah yeah try https
# exxxxkc if u want to see my site
# [Kupietz] Well, yeah, I know that, but mxtoolbox complained about it... it might look weird to some automated systems.
# exxxxkc lol
# [Kupietz] I dunno. I do nonstandard stuff for a goof sometimes too. But right now, while you're trying to improve your reputation as far as automated systems, you might want to keep things simple.
# exxxxkc or just use another domain
# exxxxkc another domain do work for gmail
# exxxxkc gmail didnt ban my server
# exxxxkc i have another domain that is cooler then exkc.moe
# [Kupietz] You always could... although be aware if you move domains, Google's search index might think it's duplicated content and not index you, if you care about that. I had that happen for a few months after moving domains and accidentally leaving the content accessible under the old one. Make sure you submit sitemaps, get 301 redirects set up when needed, etc.
# exxxxkc i got that bc i wanted to make quirky/wracky domain
# [Kupietz] It's memorable. And I never heard of ".moe" TLD before, that's a new one on me
# exxxxkc i have 2 do main tbh
# exxxxkc *i got that bc i wanted to make quirky/wracky email
# exxxxkc mb
# exxxxkc i have moe.website but in diff lang
# [Kupietz] uh oh...
# exxxxkc well u need translate moe.website
# exxxxkc in different moe.website
# exxxxkc or just go to exkc.moe with https
# exxxxkc well u need translate moe.website in different language or just go to exkc.moe with https
# exxxxkc i am tried lol
# exxxxkc yeah it is a full unicode domain
# [Sophia_wood] I'm going through my site today making sure all the svelte 4 stuff is out and svelte 5 is implemented right. I'm liking props.
kishy, troojg, ax562 and redshuffle joined the channel