Setting up a Box with 512 MB of RAM

Hi,

I have an external ownCloud-Instance and an Webserver (with 6 Websites) running on an 512 MB RAM Machine.
As I have read here (in the machine list - with the tested providers,…) some people have installed it on an 512 MB RAM Machine (with 10 Users) aswell. So - can anybody tell me how to do this? If I see (in the Monitoring) that the machine is to slow, or if i need more, i can do the upgrade everytime :wink:
But for the first time - I think 512 MB RAM should be enough?

Better to go for a Vultr 768Mb option (same cost than a DO 500Mb) under that scenario: https://www.vultr.com/pricing/

To answer your question, open up setup/preflight.sh in the mailinabox directory and search for the line if [ $TOTAL_PHYSICAL_MEM -lt 750000 ]; then just change it to whatever is lower than your amount of RAM. I’m also running MiaB without problems on 512mb of RAM and < 10 users.

2 Likes

Thank You for your Help. I will Test this later :wink:

@JoshData I think we should enable this by default. We could give users a warning, that they “should” have 1024 MB of RAM on their Server (for bigger installations). But i think 512 MB of RAM are enough for “single-user” or “low-end” - users.

If I were to do things over again, I wouldn’t use Vultr. Their ranges are almost totally blacklisted by the major providers, and it’s a pain to go through each one to get delisted. DO isn’t much better, but a little bit.

You might have to pay a bit more to find a more respected host, but it’s worth it to get your emails to actually deliver. More places than you might expect use Office 365, for example, which default-blocked my server before I requested delisting on two separate occasions.

I am wondering where/how you found this info about majors blacklisting by IP. regardless of provider (personally, I have machines at aws, vultr, do, ramnode, inmotion, bluehost, etc.), I check the IP at a typical IP check site and ONLY when it comes back completely clean do I move forward.

However, it seems like what you’re saying is that the big guys might have these IP’s blacklisted anyway??? I don’t see anywhere where the standard blacklist checker sites perform checks against GMAIL, MS, Yahoo, etc…??? is this correct?

  1. Where are you checking?
  2. How are you delisting your blacklisted IP with big companies like Google?

Fair questions to ask! I can’t remember the exact site I found the statistics on, but I saw some charts that aligned with my personal experience. It showed the rate of IPs under certain ASNs being blocked by mail servers. VULTR (Choopa) was at the top (want to say it was like 80%ish), which makes sense because they have some of the cheapest prices and are therefore more economically accessible to abusers.

I’ve also found that my emails often get blocked by major networks (Gmail, Office 365 / Outlook.com, haven’t tried Yahoo). These lists are internal to them and (afaik) not queryable, which is why the typical checker sites wouldn’t see any records of you being blacklisted.

Microsoft specifically emailed me a reply when my message was blocked, returning as part of the message 550 5.7.1 Service unavailable; Client host [104.156.252.162] blocked using FBLW15; To request removal from this list please forward this message to delist@messaging.microsoft.com (in reply to RCPT TO command)

Gmail also blocks me, but not for any reason that I can tell. The spam headers show nothing, and the return code is successful delivery, so there’s something else going on on Gmail’s end that’s filtering my server, and I’m very confident it’s IP reputation.

As I understand it, FBLW15 is a massive list of denials for specific providers that have had significant abuse in the past. I could totally be wrong, and I’m open to accepting that if I am.

To get removed from these lists:

Google has a “feedback loop” that you can join, though I think it’s targeted mostly for mass mailers, but there’s nothing better for personal servers, so it’s really the only option I know of. Applying for the feedback loop and delisting is rather annoying, hence why I haven’t completed it yet.

Microsoft lets you reply to the error email they send you when you’re blocked, which opens a ticket with MS support, and they remove you.

I don’t know about Yahoo.

To recap:

  • I have valid SSL certs, with the good MIAB configuration settings enabled.
  • My DKIM, DMARC, and SPF records are set correctly
  • My PTR record is set correctly
  • I have valid WHOIS info
  • I do not send mass mail… at all.
  • Various spam/blacklist test sites show no issues
  • I’m on DNSWL.org
  • I’m not on any queryable blacklists

There’s no tangible reason for me to be blocked, but I have been since day 1, which really leads me to believe, as the aforementioned site showed, that a lot of VULTR’s ASN was blocked.

WOW. Super interesting stuff. We have similar setup and I, like you don’t do any spam mailing. I do however use amazon ses to send my newsletter, which i monitor very closely with ip checkers and most frequently mail-tester.com.

Have you used it? what is your rating? I will try to keep an even closer eye on these things. My inmotion IP’s are way worse than Vultr and my experience with shared hosting environments are awful as they may use one IP for your domain but share the sending IP for mail. it’s awful for people who need mail to be delivered. Even my bluehost dedicated server with dedicated IP’s weren’t perfect.

I think I need to work on a site that uses a number of the major email providers to check for deliverabilty. hmmm.

I just ran mail-tester. 10/10.

SA section: http://screencap.xyz/ORiDrocKz6.png

@joshh99 Have you added the rua- or ruf-segment to your DMARC entries (if so, for those unfamiliar with it, Google will send daily reports about rejected/delivered emails from one’s domains)?

TXT _dmarc.example.com "v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@example.com"

But I don’t know if those records show anything beyond SPF/DKIM results, if emails get rejected for reasons beyond those checks.

searching this forum for “rua-” “ruf-segment” or “DMARC entries” returns zero results. So, is there a link or some directions to creating what you suggest? And a little clarification on DMARC as it pertains to MIAB and why is it something we are “customizing” vs “included”? I ask because the tone of every response/post from the creator of MIAB suggests that he strongly urges NO customization.

In fact, I am going through the implementation of Sovereign because of the whole strongly urging not to mess with DNS in MIAB.

Any clarification would be great. but probably in a new topic???

(@uca I responded to your DMARC question in the separate DMARC thread you created.)

MIAB already provides DMARC support (which is how I got started on it in the first place), it just doesn’t set all the possible fields of the DMARC records. For larger sites, the reports can become quite voluminous from what I read, so I can understand that it doesn’t make sense to turn it on by default.

I run DNS on a separate service (Zonomi), which allows me to make these modifications without having to touch my MIAB installation (which I have modified nevertheless, mea culpa).

1 Like

To give my 512MB server a little more room I’ve lowered the amount for child processes created for spampd and the management daemon. Both were the ones using the most memory on my system.

Changes to the installation scripts:

Both shouldn’t give a notable performance decrease on a server with not a lot of traffic. (I have about 5-10 domains/mailboxes confugered which receive about 50 mails a day in total)

@joshh99 according to Vultr Faq (https://www.vultr.com/faq/) they block port 25 by default, i guess they do that for past issues and bad IP reputation. Actually i’m running MIAB on a 1G DO VPS but in the past i’ve tried it also on Vultr instances with no issues, but i remember that i needed to ask for open port 25 on my VPS.