I have named running on port 53 on my server so it should be correct. The reason the script is saying it is not open is because it runs a check out to see if port 53 is accessible on the public internet and if it is not gives you that message. Also, when I check to see if I can get any response for your domain out using nslookup tools I also don’t get a response.
I use ESXi for my virtualization platform, but they all work similar. Lets blow away both with the below:
apt-get remove bind9
apt-get remove nsd*
That should get rid of both from the server. Then check to see if anything is sitting on port 53 before starting the reinstall. I love the installer of MiaB as it is smart enough to reinstall missing services.
updated DNS: OpenDKIM configuration
No TLS certificates could be provisoned at this time:
box.f2f10.com: DNS isn’t configured properly for this domain: DNS resolution failed (A: All nameservers failed to answer the query box.f2f10.com. IN A: Server 127.0.0.1 UDP port 53 answered The DNS operation timed out.; Server 127.0.0.1 UDP port 53 answered The DNS operation timed out.; Server 127.0.0.1 UDP port 53 answered The DNS operation timed out.; Server 127.0.0.1 UDP port 53 answered The DNS operation timed out.; Server 127.0.0.1 UDP port 53 answered SERVFAIL).
@box:~$ sudo netstat -plnt | grep named
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 5694/named
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 5694/named @box:~$ sudo netstat -plnu | grep named
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
udp 0 0 127.0.0.1:53 0.0.0.0:* 5694/named
Local DNS (bind9) is not running (port 53). Local DNS Control (bind9/rndc) is not running (port 953).
SSH Login (ssh) is running but is not publicly accessible at 76.10.176.225:22. Public DNS (nsd4) is not running (port 53).
Incoming Mail (SMTP/postfix) is running but is not publicly accessible at 76.10.176.225:25.
Outgoing Mail (SMTP 587/postfix) is running but is not publicly accessible at 76.10.176.225:587.
IMAPS (dovecot) is running but is not publicly accessible at 76.10.176.225:993.
Mail Filters (Sieve/dovecot) is running but is not publicly accessible at 76.10.176.225:4190.
HTTP Web (nginx) is running but is not publicly accessible at 76.10.176.225:80.
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
HTTPS Web (nginx) is running but is not publicly accessible at 76.10.176.225:443.
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
@box:~$ sudo netstat -plnu | grep named
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.) @box:~$ sudo netstat -plnt | grep named
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
@miabatf2f10 please contact your ISP / VPS provider to confirm they are not blocking the ports. (some VPS providers will auto block these ports if you send or receive too much mail as an example or if you violate a ToS somewhere)
Also confirm sudo is working as it should not complain about process ownership when running netstat with sudo.
I am getting “220 box.f2f10.com ESMTP Hi, I’m a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)” when accessing ports 25 and 587 on that IP.