I currently use Cloudflare on my domain , but until now I use MAIB box entry there to be “DNS Only” and not “proxied by cloudflare”. Everything works fine with this set up.
I want to explore if I can proxy the MAIB box as well through Cloudflare (only the A record of box.mymailserver.com ) as I wanted to see the analytics data of that to be included in Cloudflare console as well.
Does anybody have this setup working ?
I cant seem to get my head round how this can be made to work (my default setting is to enforce SSL 1.3 in CF) . The route would be user -> CF -> MAIB , so I guess CF will need to import the MAIB’s Letsencrypt certficate. Is that correct / make sense ?
If it makes sense how do I export the MAIB certificate , can this be process be scripted ? Any pointers would be great as have never done this sort of thing .
I am not a CF user, but afaik, CF creates it’s own SSL certificate. So that part is not an issue.
I know that you absolutely cannot proxy the MX record, and in setup’s such as DirectAdmin and cPanel, you cannot proxy the SMTP/POP3/IMAP connection. What I do not know is if proxying the A record for box.mymailserver.com will be problematic, or not.
You can look at where in the nginx configuration the include directive is used on a directory, and then place additional configuration files there.
However, these configurations will still be subject to other configurations in nginx, so you will need to figure out what and how to override those conflicts, as this is usually possible in nginx within a given virtual server or location.
So based on my limited testing - the answer is no. You can’t front MiaB with Cloudflare. I altered my A record for box..com so that it was proxied through cloudflare which immediately broke mail delivery as my MX record is pointed to box..com.
I then created a secondary A record, mail..com, which allowed me to send email, but no receive as reverse DNS no longer worked!
Happy to hear any other suggestions if people have any!