Search results

You're (wrongly?) assuming that the DNS-01 does not check for the A-record to point server issuing the request. I'm not 100% sure that's a dependency as I don't see that described here: Challenge Types A wildcard certificate can NOT be issued using the HTTP-01 challenge, which means Plesk IS...

I believe that's the same certificate you set here: https://<yourplesk>:8443/admin/ssl-certificate/list in "Certificate for securing Plesk" Why is it expired? I don't know if it's the cause of your FTP problems, but fixing that is always good.

It does mean I can tick another "advantage box" for my setup ;)

I was curious if Bind would check if the slave server would indeed accept a zone update from an master server that's actually not authoritative. It seems that's indeed true according to isc.org You could solve this by having master/slave pairs. A slave that's not authoritative will not be...

I create their DNS records on a separate Plesk server. That way I have all the DNS records on 1 server. This has advantages and disadvantages. indeed, each domain has to be configured twice. Migration from 1 server to another is much easier as I don't have to change any registry info. I...

My clients can't create DNS records with Plesk. Their web/mailserver is not an authority. BTW..... About slave DNS servers. You only need 1 slave, really. I've seen DNS fail with other ISP's and they sometimes even have more than 1 slaves. When I investigated their setup I noticed that all...

I have my slave DNS configured outside of Plesk. Disabled the Plesk extension and just install standard bind. On the Plesk Master DNS I did use the DNS Slave extension

BTW... Also the DNS template needs to be able to create a _acme-challenge.<domain> NS-record

The trick to get Letsencrypt wildcards work when you have a seperate DNS-server is to make use of "DNS delegation" By having an NS-record with the name _acme-challenge.<domain> pointing to your webserver, you will tell Letsencrypt to query the webserver for the TXT-record...

https://talk.plesk.com/threads/unable-to-create-ns-records-with-underscores.357879/

User name: mr-wolf TITLE Unable to create NS records with underscores PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE Plesk Obsidian PROBLEM DESCRIPTION I need to create an NS-record with Plesk with the name _acme-challenge This is not allowed by the interface nor the CLI...

Yes, it works!!! By having an NS-record on my authoritative DNS-server _acme-challenge.<domain> pointing to the server that is running the webserver and installing the DNS-extension on that webserver, I have this working. The only problem is that I can't create an NS-record with an underscore...

The Plesk interface does not allow me to use an underscore for NS-records, nor does the CLI This means I have to create this record manually by directly manipulating the zonefile.

I have, for years, chosen to have DNS on a seperate Plesk server instead of the servers on which the domains of my clients are configured. This gives me several advantages, but also disadvantages. When Plesk implemented support for wildcard certificates I noticed that I suddenly had to create...

Can you please bring it to the attention of the developers and maybe it was once done for some reason which does not exist anymore? The Internet was already a bad place with all those spammers 10 years ago, but it only got worse. A timeout of an hour is way too long nowadays to let them hog your...

I didn't see this coming. Large messages? The timeout is the time postfix waits when there's no incoming data. The default setting of postfix is 5 minutes, This is what postfix recommends when it's used in stress environment Line 1: under conditions of stress, use an smtpd_timeout value of...

Plesk really likes to have smtpd_timeout = 3600s and smtpd_proxy_timeout = 3600s in its /etc/postfix/main.cf I don't, so I have both these entries commented out. The reason for this is that I have Postfix protected with an SMTP-proxy (ASSP). Whenever spam comes in it will, in real time, break...

User name: mr-wolf TITLE Letsencrypt: Sentence containing the acme-challenge TXT-record is cut in 2 parts PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE Plesk Obsidian 18.028 on Ubuntu 18.04 PROBLEM DESCRIPTION When I'm presented the TXT-record for the acme-challenge regarding a...

I just had a challenge missed because I didn't fully select the TXT-record... With all the amount of space I have available to me, the record is still cut in 2 and it's easy to miss the first part. In this case a simple dash It will probably never happen to me anymore, but I don't like bad...

I will check this out. Probably next week. Hopefully I can also find out if I have the same problem between the source server and a server I already have for a longer time. My guess it's a problem with my new destination server.