Welcome to Centmin Mod Community
Register Now

Email Amazon SES for xenforo ?

Discussion in 'Domains, DNS, Email & SSL Certificates' started by hungphutho, Aug 14, 2015.

Tags:
  1. GamerJota

    GamerJota Member

    49
    7
    8
    Mar 1, 2016
    Ratings:
    +18
    Local Time:
    1:32 PM
    That's weird, If I set it up like that I get the following error when the boards tries to send e-mails:


    Code:
    Email to [VALID EMAIL] failed: Could not read from email-smtp.us-east-1.amazonaws.com
     
  2. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Try re-creating or regenerating your AWS AMI access key/token.
     
  3. GamerJota

    GamerJota Member

    49
    7
    8
    Mar 1, 2016
    Ratings:
    +18
    Local Time:
    1:32 PM
    I did try that, in phpBB TLS works fine, in XenForo only SSL works, otherwise I get the error mentioned above :dead:
     
  4. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    strange then. Tried a new AWS AMI user ?
     
  5. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
  6. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    also see XF 1.1 - Amazon SES With Xenforo | Page 3 | XenForo Community
    @Matt's old post
     
  7. GamerJota

    GamerJota Member

    49
    7
    8
    Mar 1, 2016
    Ratings:
    +18
    Local Time:
    1:32 PM
    Tried with a new AMI user, also with the solutions of the topics above, still the same, I guess I will just stick to SSL.
     
  8. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    very strange then.
     
  9. Itworx4me

    Itworx4me Premium Member Premium Member

    339
    35
    28
    Mar 14, 2017
    Ratings:
    +65
    Local Time:
    9:32 AM
    Nginx 1.27.4
    MariaDB 10.6.21
    I am having issues sending email on port 587 using Amazons SES SMTP. I ran this code:
    Code (Text):
    ss -lntu
    
    Netid State      Recv-Q Send-Q                                                            Local Address:Port                                                              Peer Address:Port
    udp   UNCONN     0      0                                                                             *:53                                                                           *:*
    udp   UNCONN     0      0                                                                     127.0.0.1:11211                                                                        *:*
    udp   UNCONN     0      0                                                                            :::53                                                                          :::*
    tcp   LISTEN     0      0                                                                             *:21                                                                           *:*
    tcp   LISTEN     0      0                                                                             *:53                                                                           *:*
    tcp   LISTEN     0      0                                                                             *:22                                                                           *:*
    tcp   LISTEN     0      0                                                                     127.0.0.1:25                                                                           *:*
    tcp   LISTEN     0      0                                                                     127.0.0.1:8891                                                                         *:*
    tcp   LISTEN     0      0                                                                     127.0.0.1:9000                                                                         *:*
    tcp   LISTEN     0      0                                                                     127.0.0.1:11211                                                                        *:*
    tcp   LISTEN     0      0                                                                             *:80                                                                           *:*
    tcp   LISTEN     0      0                                                                             *:80                                                                           *:*
    tcp   LISTEN     0      0                                                                            :::21                                                                          :::*
    tcp   LISTEN     0      0                                                                            :::53                                                                          :::*
    tcp   LISTEN     0      0                                                                            :::22                                                                          :::*
    tcp   LISTEN     0      0                                                                            :::3306                                                                        :::*
    

    Doesn't show port 587 as being open or used. How would I open port 587 to work with Amazons SES SMTP?

    Thanks,
    Itworx4me
     
  10. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Did you request Amazon SES support to take you out of sandbox mode ? If not you want to be able to send live real emails ? Did you test send emails via SES in Xenforo ? You won't see port 587 listed as it's not a listening service.

    Did you setup correctly Amazon AMI access key/token. Try re-creating or regenerating your AWS AMI access key/token.

    Centmin Mod LEMP stack installs CSF Firewall out of the box, so to be able to remotely connect to external servers, you need to whitelist and allow TCP connections out. Centmin Mod 123.09beta01 by default now should allow port 587 for TCP_OUT and TCP6_OUT in CSF Firewall config file /etc/csf/csf.conf.
    Code (Text):
    egrep '^TCP_OUT|^TCP6_OUT' /etc/csf/csf.conf
    TCP_OUT = "993,995,465,587,1110,1194,9418,20,21,22,25,53,80,8079;8080,8081,8082,110,113,443,587,993,995"
    TCP6_OUT = "993,995,465,587,20,21,22,25,53,80,110,113,443,587,993,995"
    


    Also see Centmin Mod LEMP stack CSF Firewall default port listing.

    Also see Amazon SES SMTP Issues - Amazon Simple Email Service
     
  11. Itworx4me

    Itworx4me Premium Member Premium Member

    339
    35
    28
    Mar 14, 2017
    Ratings:
    +65
    Local Time:
    9:32 AM
    Nginx 1.27.4
    MariaDB 10.6.21
    I finally got xenforo to send email. For some reason I had to verify the boards email address in Amazon. I am not sure why because eveything I read say once you are out of sandbox that it didn't matter which email address worked.

    I was wondering if you had to setup a DKIM for outgoing emails from the server? I currently have a DKIM setup to work with Zoho for incoming and outgoing emails. Can you have 2 DKIM?

    Thanks,
    Itworx4me
     
  12. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
  13. Itworx4me

    Itworx4me Premium Member Premium Member

    339
    35
    28
    Mar 14, 2017
    Ratings:
    +65
    Local Time:
    9:32 AM
    Nginx 1.27.4
    MariaDB 10.6.21
  14. pamamolf

    pamamolf Well-Known Member

    4,125
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    7:32 PM
    Nginx-1.29.x
    MariaDB 10.6.x
    So even if we use Amazon SES we should have set Dkim records?

    I thought that was not needed as SES will take care of it through the SMTP ..... ?
     
  15. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    see Email - Steps to ensure your site/server email doesn't end up in spam inboxes

    There's 2 servers sending outbound emails

    1. your centmin mod server via postfix @hostname.domain.com
    2. your amazon ses services via @domain.com

    need DKIM, SPF, DMARC for both sets of @domain.com and @hostname.domain.com
     
  16. MaximilianKohler

    MaximilianKohler Member

    214
    9
    18
    Jun 23, 2023
    Ratings:
    +39
    Local Time:
    9:32 AM
    Can you show your Xenforo "options/groups/emailOptions/" page settings? Presumably you're using xenforo's automated bounce handling? And connect it somehow to Amazon SNS?

    I've been reading through a bunch of threads on the xenforo forums and no one is giving clear and full directions for how to set up SES.

    This addon might be the easiest way to do it? Beta - Amazon SES Bounces Support
    I haven't read another clear explanation of how to set up the automated bounce handling.

    EDIT: I found this XF 2.0 - Bounce Email - use a dedicated gmail address (bounces9384@gmail) to handle bounces. Is that what you're using?
     
    Last edited: Jul 2, 2023
  17. eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    2:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yup that's all I use for Bounce but not gmail account just a separate @mydomain.com email account with IMAP access.