Welcome to our Postmaster Site
This page provides contact information for troubleshooting technical issues related to email communication from our self-hosted email server.
Contact information
If you have any technical or abuse issues with sending to or receiving from our email servers, please email us at admin(at)nixsanctuary.com. (If your system cannot send mail to @nixsanctuary.com addresses, use nixsanctuary(at)duck.com instead).
In case of emergency you can contact Manish (Admin) via Telegram username or live IRC chat.
Please use our S/MIME key if you prefer end-to-end encryption for email.
NixSanctuary's outbound and inbound mail server IP addresses
nixsanctuary.com mail is handled by mail.nixsanctuary.com.
| DNS Name | IP address |
|---|---|
| mail.nixsanctuary.com | 185.125.171.84 2a03:94e0:16f1::c0de |
Our email domain name(s) and SPF
Currently the only official domain.tld for NixSanctuary is: @nixsanctuary.com. SPF TXT records for our email domain names contain the IP addresses of the sending email servers.
Outbound DKIM Signing Policy and DMARC
Our mail server uses DKIM along with SPF and DMARC for source forgery protection. An email sent out from Posteo mail servers will be signed with a Nixsanctuary d=nixsanctuary.com DKIM-signature.
Nixsanctuary's mail servers have a strict p=reject; DMARC policy.
Security of our mail servers
Our email services are secured using TLS 1.2 and 1.3, PFS, DNSSEC and DANE.
The fingerprints of the TLS certificate of our mail server, issued by the trusted root CA HARICA, are as follows:
SHA-256
02:33:01:77:D1:99:5A:46:00:9D:E9:0C:26:AC:75:F8:3C:6B:8B:A5:C9:80:88:FC:A1:C2:13:1B:55:37:08:66
SHA-1
70:C0:4C:08:0E:03:9B:11:9F:EC:51:CA:3C:32:99:A4:19:70:5F:42
We regularly audit our mail servers for the same and here are our findings:
Source forgery protection
[+] DKIM: _domainkey subdomain present; DNSSEC-signed;
[+] SPF: present; strict; DNSSEC-signed;
[+] DMARC: present; strict; DNSSEC-signed;
TLS enforcement
[+] MTA-STS: enforced; all MXs match policy;
[+] DANE: present for all MXs; DNSSEC-signed; validity check done;
DNS consistency
[+] FCrDNS: all MXs have forward-confirmed rDNS
[+] DNSSEC: A/AAAA and MX records are signed;
Our mail servers use reputable DNS blacklists to process incoming mail. Depending on the weighting of the score, incoming mail may be rejected or quarantined.
Our mail server is regularly tested to be in the Hall of Fame - Email by Internet.nl.
Imprint
Should you prefer to communicate via traditional postal services, you may do so at the following mailing address:
Manish G
Bill Road,
Bill, Vadodara
GJ
India
Post Office: Bill Branch
Admin @ NixSanctuary.com