Member Avatar for scarcella

Hi all,

I have bought a domain on GoDaddy called techitproductions.com. At home i have a Linux Ubuntu Server running Apache, php5, ispconfig, courier mail etc... I have forwarded port 80, 25565 (for Minecraft), 8888 (for ispconfig), 22 (for Putty).

My question is what ports do i need to portforward for a fully working server, with both SSL, SSH and mail working?

My second question is how do i get my domain pointing to my server? My external ip is static.

Please i need a step by step instruction's i am new to Linux servers and the whole website hosting etc...

Thanks,
Marais

  • 2 Contributors
  • 1 Reply
  • 221 Views
  • 14 Hours Discussion Span
  • Latest Post Latest Post by rch1231

Dani AI

Generated

Setup summary: is running an Ubuntu/Apache box with ISPConfig and a static public IP; has already listed the common service ports. The notes below fill important gaps that help turn “ports forwarded” into a usable, secure, and deliverable hosting/mail setup.

DNS and addressing: manage records at the registrar or a dedicated DNS host so hostnames (web, mail, control panel) resolve to the public IP; use a low TTL while testing and raise it later. If the server will handle mail, publish MX records that point to the mail host name. If the same ISP provides the public IP, ask them to set a reverse DNS (PTR) that matches the mail hostname — many receiving MTAs reject mail without a correct PTR. If running authoritative nameservers from the same host, create glue records at the registrar.

Mail deliverability and configuration: implement SPF, DKIM and DMARC TXT records and sign outbound mail (ISPConfig can generate DKIM keys or use opendkim). Ensure SMTP submission requires authentication and TLS for clients, and verify the server is not an open relay. When troubleshooting, inspect mail logs and the mail queue and use external delivery/test tools and blacklist checks.

Router/firewall and hardening: avoid a blanket DMZ—forward only the services actually needed and keep a host firewall active. Restrict ISPConfig/management interfaces to LAN or a VPN, enforce SSH key auth and disable direct root login, and use intrusion mitigations like fail2ban. Use automatic TLS (Let’s Encrypt) for HTTPS and mail TLS. Example commands (adjust domain and e‑mail):

sudo apt update
sudo apt install certbot python3-certbot-apache
sudo certbot --apache -d techitproductions.com -d www.techitproductions.com -m admin@techitproductions.com --agree-tos

For a quick host firewall using ufw (service names used rather than numeric ports):

sudo ufw allow OpenSSH
sudo ufw allow 'WWW'
sudo ufw allow 'WWW Secure'
sudo ufw enable
sudo ufw status verbose

Finally, perform external port checks and mail-deliverability tests from outside the LAN, and monitor logs after changes. These steps complement ’s port checklist and reduce common deployment problems.

Member Avatar for rch1231

Hello,

On the ports you need available the one I can think of are:

21 ftp
22 ssh
25 smtp (email)
80 http
110 pop3 (email)
115 sftp
143 imap
220 imap2 (email)
443 https
465 smtp SMTP over SSL (TLS)
587 smtp (email - alternate as some ISP's block 25)

All the ports should be listed in /etc/services


On getting your domain name pointed to the server, go to godaddy and for your domain name find the DNS Manager. Point the A record to the IP static address of your router or firewall. On the router make the Linux server your DMZ host.

If you have not already installed email, Apache, mysql and PHP may I suggest looking into qmailtoaster. I use their installation and configuration scripts to set up web servers I manage housing multiple sites and company email. It gives you secure email with anti-spam and virus protection. Web based email and site configuration pages that can be managed by clients, along with webmail (squirrel mail). It also configures Apache and PHP to be secure for preventing sites from being hacked.

http://www.qmailtoaster.com/

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.