System
Sieve (dovecot) is running but is not publicly accessible at 00.00.00.00:4190 (timed out).
SSH Login (ssh) is running but is not publicly accessible at 00.00.00.00:22 ([Errno 111] Connection refused).
Incoming Mail (SMTP/postfix) is running but is not publicly accessible at 00.00.00.00:25 ([Errno 111] Connection refused).
Outgoing Mail (SMTP 587/postfix) is running but is not publicly accessible at 00.00.00.00:587 (timed out).
IMAPS (dovecot) is running but is not publicly accessible at 00.00.00.00:993 (timed out).
HTTPS Web (nginx) is running but is not publicly accessible at 00.00.00.00:443 (timed out).
The SSH server on this machine permits password-based login. A more secure way to log in is using a public key. Add your SSH public key to $HOME/.ssh/authorized_keys, check
that you can log in without a password, set the option ‘PasswordAuthentication no’ in /etc/ssh/sshd_config, and then restart the openssh via ‘sudo service ssh restart’.
✓ System software is up to date.
✓ administrator@box.portsport.co.za exists as a mail alias [=> sydney@portsport.co.za]
✓ The disk has 15.8 GB space remaining.
Network
✓ Outbound mail (SMTP port 25) is not blocked.
✓ IP address is not blacklisted by zen.spamhaus.org.
box.portsport.co.za
Nameserver glue records are incorrect. The ns1.box.portsport.co.za and ns2.box.portsport.co.za nameservers must be configured at your domain name registrar as having the IP
address 00.00.00.00. They currently report addresses of [Not Set]/[Not Set]. It may take several hours for public DNS to update after a change.
This domain must resolve to your box’s IP address (00.00.00.00) in public DNS but it currently resolves to [Not Set]. It may take several hours for public DNS to update
after a change. This problem may result from other issues listed here.
Your box’s reverse DNS is currently wbs-41-208-210-36.wbs.co.za, but it should be box.portsport.co.za. Your ISP or cloud provider will have instructions on setting up
reverse DNS for your box at 00.00.00.00.
The DANE TLSA record for incoming mail is not set. This is optional.
✓ hostmaster@box.portsport.co.za exists as a mail alias [=> administrator@box.portsport.co.za]
✓ Domain’s email is directed to this domain. [box.portsport.co.za has no MX record, which is ok]
✓ postmaster@box.portsport.co.za exists as a mail alias [=> administrator@box.portsport.co.za]
✓ Domain is not blacklisted by dbl.spamhaus.org.
The SSL certificate for this domain is currently self-signed. You will get a security warning when you check or send email and when visiting this domain in a web browser
(for webmail or static site hosting). Use the SSL Certificates page in this control panel to install a signed SSL certificate. You may choose to leave the self-signed
certificate in place and confirm the security exception, but check that the certificate fingerprint matches the following:
26:9F:XX:1E:E1:24:82:B5:9F:A5:62:37:XX:02:6F:19:7F:E4:B9:62
portsport.co.za
The nameservers set on this domain are incorrect. They are currently ns1.circle.co.za; ns2.circle.co.za; ns3.circle.co.za. Use your domain name registrar’s control panel to
set the nameservers to ns1.box.portsport.co.za; ns2.box.portsport.co.za.
This domain’s DNS MX record is incorrect. It is currently set to ‘0 portsport.co.za’ but should be ‘10 box.portsport.co.za’. Mail will not be delivered to this box. It may
take several hours for public DNS to update after a change. This problem may result from other issues listed here.
✓ postmaster@portsport.co.za exists as a mail alias [=> administrator@box.portsport.co.za]
✓ Domain is not blacklisted by dbl.spamhaus.org.
✓ Domain resolves to this box’s IP address. [portsport.co.za => 00.00.00.00]
? The SSL certificate for this domain is currently self-signed. Visitors to a website on this domain will get a security warning. If you are not serving a website on this
domain, then it is safe to leave the self-signed certificate in place. Use the SSL Certificates page in this control panel to install a signed SSL certificate.
This domain’s DNSSEC DS record is not set. The DS record is optional. The DS record activates DNSSEC. To set a DS record, you must follow the instructions provided by your
domain name registrar and provide to them this information: