Michael Brandonisio

Hello,

Moving the Email

In planning for my trip I needed to figure out how to get my email from my Mac to my wife’s Windows Vista laptop. I converted my email to Thunderbird around the new year due to Apple mail issues I could not figure out. So This is what I found.

Portableapps.com makes a portable windows version of Thunderbird that you can install on a flash drive. It turns out that Thunderbird uses the same data files for all platforms even for the email configuration. So all I had to do was copy the Thunderbird folder from my Mac OS user library folder to the flash drive. Go to my windows laptop. Install the portable Thunderbird from here

www.portableapps.com

Then mock up one email account with a local folder. Then replace:

flashdrive/ThunderbirdPortable/data/profile/localstore.rdf
flashdrive/ThunderbirdPortable/data/profile/mail

with the copy from my Mac OS Thunderbird profile. I opened portable Thunderbird in windows and all my mail was there. I’d have to test more to see if attachments are there too. I’m guessing they would be or maybe another file needs to be replaced. I’d also make the leap that you can move email from windows to Mac OS in a similar manor.

Test and test and test before working with real data. Create a new user on each computer to work with a copy of any data, NOT the live account.

Securing Your Email On Your Flash Drive

Now run back to the beginning. Email is sensitive and portable devised can get lost. Create an encrypted portable disk image on the flash drive prior to installing portable Thunderbird. Pick one below. Select a cross platform tool.

• VeraCrypt is open-source and code audited, improves on TrueCrypt, works on Mac and PC, and allows creation of encrypted containers
• Ciphershed is another TrueCrypt fork, works with old TrueCrypt containers, is slow with updates, and works on Mac, PC, and Linux

Install and place data in encrypted portable disk image.

Now you can mount the disk image to run your email and should not have worry about loosing your flash drive if your email has sensitive data in it. Obviously you will want to backup your flash drive regularly.

AGAIN … YOU WILL WANT TO BACKUP YOUR FLASH DRIVE REGULARLY, honest your flash drive will die at some point. It’s only a matter of time.

Sincerely,
Mike

Hello,

I have a server that I run as a shared hosting server and host many small web sites for various clients. In an effort to provide better service, I have recently moved all of the accounts to private IP addresses so email will send from the account IP address instead of the primary server IP address. This is a cPanel / WHM server setup.

After doing all this I have checked the reputation of the domains and IP addresses using these tools:

TrustedSource: www.trustedsource.org
BarracudaCentral: www.barracudacentral.org
MailRadar: www.mailradar.com
DNSstuff: www.dnsstuff.com

It all come back neutral and I still have email sent from this server marked as spam or it lands in junk mail folders. The IP addresses are clean, the domain is clean, both neutral reputations.

What can I do to get email sent from my server to not be labeled as SPAM?

I did some research it turns out that just setting up the server and properly configuring it is not enough these days. You need to apply for certification through a 3rd party white listing company. I found this one:

http://www.senderscorecertified.com/about/

And I found this regarding hotmail recipients:

http://answers.google.com/answers/threadview?id=606426

I’m guessing that if I start with one provider like hotmail and can get email through to their customers by following their rules then that will also help with other SPAM and junk filters. Now the troublesome part.

They all have different requirements. So that means you need to chase entry into each provider from the top down large providers first then smaller ones e.g. hotmail, comcast, earthlink, AOL to name a few. I think this will give me a good start. It will also continue to develop has I move forward from provider to provider.

~~ Updated Tuesday, December 23rd, 2008

In my research it turns out that “www.senderscorecertified.com” is more for bulk email providers and not for email servers that are used mostly for one-to-one email. I found these additional resources:

DNS Whitelist – www.dnswl.org
Email Reach – www.emailreach.com

Add your IP to DNS Whitelist and then review their “Other Whitelists” page. There are few more lists that may pertain to you.

Now for the golden email deliver ability troubleshooting service, GEDATS ( I made that up), Email Reach.   Email Reach test systems include over 69 different platforms, which run over 10,000 discrete tests on your email. It is a hosted service and has a 24 hour free LIVE, no restrictions trial. It can be used to test your one-to-one email server or email marketing message. A test creates a report containing Reputation, Content Assessment, Inbox Monitor, and White list Audit. Inbox Monitor will tell you if you email is landing in the SPAM folder or Inbox. Content Assessment is great for email marketing as it puts your message through the major SPAM filters and will tell what is being flagged.

I have not affiliation to any of these web sites. I just knew how much a struggled to get good information on my email server and the 24 hour test gave me what I needed.

~~ Updated Thrusday, December 25rd, 2008

Since adding all of the IP addresses on my shared server to the www.dnswl.org white list, email from this server is now landing in the inbox instead of SPAM for Yahoo and Hotmail. Very cool!

Sincerely,
Mike

Hello,

There may come a time when your DNS server is the authoritative DNS for a client or customer that has secured an IP block from a 3rd party, perhaps for T1 or DSL service. They want to use one of the IP addresses for an email server located in their office and have asked you to setup rDNS or Reverse DNS for the IP address specified. Since the IP address did not come from your ISP you cannot ask them to setup the rDNS for you. You must accept IP delegation and configure your DNS server to give an authoritative response.

Here are 3 links that helped me figure this out:
http://www.dnsstuff.com
http://www.faqs.org/rfcs/rfc2317.html
http://www.fdcservers.net/vbulletin/archive/index.php/t-578.html

I’m going to illustrate this using 10.x.x.x IP address ranges. This setup is for Bind DNS servers. You will be creating a zone for x.x.x.x.in-addr.arpa on your DNS server.

The scenario is that the client secured a new T1 line and wanted to use IP 10.0.142.162 for an email server in their office.

On your DNS server, open a terminal window. Then edited /etc/named.conf and added this to the end:

zone “160/28.142.0.10.in-addr.arpa” {
type master;
file “/var/named/142.0.10.in-addr.arpa.db”;
};

That means that it has been added to the external view section of named.conf

I have to admit that I do not fully understand why some delegations may be looking for zone 160/28.142.0.10.in-addr.arpa and others 142.0.10.in-addr.arpa. Both can contain the IP 10.0.142.162. It may have something to do with this delegation being a /28 giving the client 16 IP addresses with 14 usable starting from 10.0.142.160.

Save your changes then create a new zone DB named /var/named/142.0.10.in-addr.arpa.db

You can do this like this:

touch /var/named/142.0.10.in-addr.arpa.db

Then open /var/named/142.0.10.in-addr.arpa.db and add:

; Zone file for 160/28.142.0.10.in-addr.arpa
$TTL 14400
@      86400    IN      SOA     ns1.yournameserver.net. support.example.com. (
2008092801      ; serial, todays date+todays
14400           ; refresh, seconds
7200            ; retry, seconds
1209600         ; expire, seconds
86400 )         ; minimum, seconds
160/28.142.0.10.in-addr.arpa.         IN      84600   NS      ns1.yournameserver.net.
160/28.142.0.10.in-addr.arpa.         IN      84600   NS      ns2.yournameserver.net.

162.142.0.10.in-addr.arpa.           IN      14400   CNAME   162.160/28.142.0.10.in-addr.arpa.
162.160/28.142.0.10.in-addr.arpa.     IN      14400   PTR     mail.example.com.

Save and restart Bind. You can test your results here:
http://www.dnsstuff.com

Sincerely,
Mike