Search results

Hi Igor & Obendev, I missed those last 2 answers... Thanks for those answers and hopefully it will change one day.

BTW.... Similar, but not the same, as Peter Debik's request, I am interested in the possibility to hide the "Assign the certificate to mail domain" The reason for this is that I have my own Maul autodiscovery and I am using a fixed and bought wildcard certificate on Postfix & Dovecot. That...

@Peter Debik What is the reason for not wanting to support the wildcard certificate? Maybe it's because your webservers are not running the authoritative DNS. If that's the reason, you may be interested in my solution for that: DNS-01 delegated to webserver If that is not the reason, I am...

You're (wrongly?) assuming that the DNS-01 does not check for the A-record to point server issuing the request. I'm not 100% sure that's a dependency as I don't see that described here: Challenge Types A wildcard certificate can NOT be issued using the HTTP-01 challenge, which means Plesk IS...

I believe that's the same certificate you set here: https://<yourplesk>:8443/admin/ssl-certificate/list in "Certificate for securing Plesk" Why is it expired? I don't know if it's the cause of your FTP problems, but fixing that is always good.

It does mean I can tick another "advantage box" for my setup ;)

I was curious if Bind would check if the slave server would indeed accept a zone update from an master server that's actually not authoritative. It seems that's indeed true according to isc.org You could solve this by having master/slave pairs. A slave that's not authoritative will not be...

I create their DNS records on a separate Plesk server. That way I have all the DNS records on 1 server. This has advantages and disadvantages. indeed, each domain has to be configured twice. Migration from 1 server to another is much easier as I don't have to change any registry info. I...

My clients can't create DNS records with Plesk. Their web/mailserver is not an authority. BTW..... About slave DNS servers. You only need 1 slave, really. I've seen DNS fail with other ISP's and they sometimes even have more than 1 slaves. When I investigated their setup I noticed that all...

I have my slave DNS configured outside of Plesk. Disabled the Plesk extension and just install standard bind. On the Plesk Master DNS I did use the DNS Slave extension

BTW... Also the DNS template needs to be able to create a _acme-challenge.<domain> NS-record

The trick to get Letsencrypt wildcards work when you have a seperate DNS-server is to make use of "DNS delegation" By having an NS-record with the name _acme-challenge.<domain> pointing to your webserver, you will tell Letsencrypt to query the webserver for the TXT-record...

https://talk.plesk.com/threads/unable-to-create-ns-records-with-underscores.357879/

User name: mr-wolf TITLE Unable to create NS records with underscores PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE Plesk Obsidian PROBLEM DESCRIPTION I need to create an NS-record with Plesk with the name _acme-challenge This is not allowed by the interface nor the CLI...

Yes, it works!!! By having an NS-record on my authoritative DNS-server _acme-challenge.<domain> pointing to the server that is running the webserver and installing the DNS-extension on that webserver, I have this working. The only problem is that I can't create an NS-record with an underscore...

The Plesk interface does not allow me to use an underscore for NS-records, nor does the CLI This means I have to create this record manually by directly manipulating the zonefile.

I have, for years, chosen to have DNS on a seperate Plesk server instead of the servers on which the domains of my clients are configured. This gives me several advantages, but also disadvantages. When Plesk implemented support for wildcard certificates I noticed that I suddenly had to create...

Can you please bring it to the attention of the developers and maybe it was once done for some reason which does not exist anymore? The Internet was already a bad place with all those spammers 10 years ago, but it only got worse. A timeout of an hour is way too long nowadays to let them hog your...

I didn't see this coming. Large messages? The timeout is the time postfix waits when there's no incoming data. The default setting of postfix is 5 minutes, This is what postfix recommends when it's used in stress environment Line 1: under conditions of stress, use an smtpd_timeout value of...

Plesk really likes to have smtpd_timeout = 3600s and smtpd_proxy_timeout = 3600s in its /etc/postfix/main.cf I don't, so I have both these entries commented out. The reason for this is that I have Postfix protected with an SMTP-proxy (ASSP). Whenever spam comes in it will, in real time, break...