Hello,

            Could you please unblock outbound SMTP port 25 for my server?

            Server IP: 159.69.80.91

            This server is used for a legitimate private mail server.
            SPF, DKIM, DMARC, PTR and abuse controls will be configured.

            Thank you.

Servers
            -> server
            -> Networking
            -> Public Network
            -> IPv4
            -> Edit Reverse DNS

telnet gmail-smtp-in.l.google.com 25

nslookup -type=mx ideo-lab.com
            dig mail.ideo-lab.com
            dig -x 159.69.80.91
            dig TXT ideo-lab.com
            dig TXT _dmarc.ideo-lab.com
            dig TXT dkim._domainkey.ideo-lab.com

hostnamectl set-hostname mail.ideo-lab.com
            hostname

apt update
            apt install -y git curl jq dnsutils telnet nano mailutils docker.io docker-compose

mkdir -p /usr/local/lib/docker/cli-plugins
            curl -SL https://github.com/docker/compose/releases/download/v2.29.7/docker-compose-linux-x86_64 -o /usr/local/lib/docker/cli-plugins/docker-compose
            chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
            docker compose version

cd /opt
            git clone https://github.com/mailcow/mailcow-dockerized
            cd /opt/mailcow-dockerized

./generate_config.sh

nano /opt/mailcow-dockerized/mailcow.conf

ENABLE_IPV6=n

docker compose pull
            docker compose up -d
            docker ps

guillaume@ideo-lab.com

cd /opt/mailcow-dockerized
            docker compose logs -f postfix-mailcow

cd /opt/mailcow-dockerized
            docker compose exec postfix-mailcow postconf smtpd_recipient_restrictions

Système
            -> Accès
            -> Authentification à deux facteurs
            -> OTP

mkdir -p /opt/mail-monitoring
            nano /opt/mail-monitoring/check_blacklist.sh

#!/bin/bash

            IP="159.69.80.91"
            EMAIL="guillaume@ideo-lab.com"

            REVERSED_IP=$(echo $IP | awk -F. '{print $4"."$3"."$2"."$1}')

            BLACKLISTS=(
            "zen.spamhaus.org"
            "bl.spamcop.net"
            "b.barracudacentral.org"
            "dnsbl-1.uceprotect.net"
            )

            ALERT=""

            for BL in "${BLACKLISTS[@]}"
            do
            RESULT=$(dig +short ${REVERSED_IP}.${BL})

            if [ ! -z "$RESULT" ]; then
            ALERT="${ALERT}\nBLACKLIST DETECTED : $BL ($RESULT)"
            fi
            done

            if [ ! -z "$ALERT" ]; then
            echo -e "$ALERT" | mail -s "MAIL SERVER BLACKLIST ALERT" $EMAIL
            fi

chmod +x /opt/mail-monitoring/check_blacklist.sh
            /opt/mail-monitoring/check_blacklist.sh

nano /opt/mail-monitoring/server_alerts.sh

#!/bin/bash

            EMAIL="guillaume@ideo-lab.com"

            ALERT=""

            DISK=$(df / | tail -1 | awk '{print $5}' | sed 's/%//')

            if [ "$DISK" -gt 85 ]; then
            ALERT="${ALERT}\n[DISK] Usage critique : ${DISK}%"
            fi

            RAM=$(free | grep Mem | awk '{printf("%.0f"), $3/$2 * 100.0}')

            if [ "$RAM" -gt 90 ]; then
            ALERT="${ALERT}\n[RAM] Usage critique : ${RAM}%"
            fi

            CONTAINERS=(
            "mailcowdockerized-postfix-mailcow-1"
            "mailcowdockerized-dovecot-mailcow-1"
            "mailcowdockerized-nginx-mailcow-1"
            )

            for C in "${CONTAINERS[@]}"
            do
            STATUS=$(docker inspect -f '' $C 2>/dev/null)

            if [ "$STATUS" != "true" ]; then
            ALERT="${ALERT}\n[CONTAINER DOWN] $C"
            fi
            done

            QUEUE=$(docker exec mailcowdockerized-postfix-mailcow-1 postqueue -p | tail -1 | awk '{print $5}')

            if [[ "$QUEUE" =~ ^[0-9]+$ ]]; then
            if [ "$QUEUE" -gt 50 ]; then
            ALERT="${ALERT}\n[SMTP QUEUE] Queue importante : $QUEUE messages"
            fi
            fi

            if [ ! -z "$ALERT" ]; then
            echo -e "$ALERT" | mail -s "MAIL SERVER ALERT" $EMAIL
            fi

chmod +x /opt/mail-monitoring/server_alerts.sh
            crontab -e

0 6 * * * /opt/mail-monitoring/check_blacklist.sh
            */15 * * * * /opt/mail-monitoring/server_alerts.sh

docker volume ls | grep mailcow

mkdir -p /backup/mailcow
            nano /backup/mailcow/backup_mailcow.sh

#!/bin/bash

            DATE=$(date +%Y-%m-%d_%H-%M-%S)
            BACKUP_DIR="/backup/mailcow/$DATE"

            mkdir -p "$BACKUP_DIR"

            cd /opt/mailcow-dockerized || exit 1

            docker compose stop postfix-mailcow dovecot-mailcow

            docker run --rm -v mailcowdockerized_vmail-vol-1:/volume -v "$BACKUP_DIR":/backup alpine tar czf /backup/vmail.tar.gz -C /volume .
            docker run --rm -v mailcowdockerized_mysql-vol-1:/volume -v "$BACKUP_DIR":/backup alpine tar czf /backup/mysql.tar.gz -C /volume .
            docker run --rm -v mailcowdockerized_redis-vol-1:/volume -v "$BACKUP_DIR":/backup alpine tar czf /backup/redis.tar.gz -C /volume .
            docker run --rm -v mailcowdockerized_crypt-vol-1:/volume -v "$BACKUP_DIR":/backup alpine tar czf /backup/crypt.tar.gz -C /volume .

            cp mailcow.conf "$BACKUP_DIR/"
            cp docker-compose.yml "$BACKUP_DIR/"

            docker compose start postfix-mailcow dovecot-mailcow

            find /backup/mailcow/* -maxdepth 0 -type d -mtime +7 -exec rm -rf {} \;

            echo "Backup terminé : $BACKUP_DIR"

chmod +x /backup/mailcow/backup_mailcow.sh
            /backup/mailcow/backup_mailcow.sh
            ls -lh /backup/mailcow/YYYY-MM-DD_HH-MM-SS

550-5.7.26 Unauthenticated email from domain is not accepted due to DMARC policy

550-5.7.25 IP address sending this message does not have a PTR record setup

cd /opt/mailcow-dockerized
            docker compose restart sogo-mailcow nginx-mailcow

docker-compose --version
            docker compose version

docker volume ls | grep mailcow