MX record broke emails

mattyg

mattyg

mattyg

Soldato
Joined
17 Jun 2007
Posts
9,764
So, I did a thing.
Spent all last night on Claude and built a pretty S*** hot website. This morning decided to install wordpress on my hosting (krystal) and things went downhill
Turns out I needed to change the A record as the DNS was wrong.. I did that via Zones on Krystal and........Broke my business emails.

Wouldn't have been much of an issue if it had been friday night but i need to get something in place for my emails by tomorrow.

Is there a workaround or a forwarding thingy I can do to forward all emails to a certain domain whilst we wait for the MX records to propagate???

Wrong time to be making big changes during tender and contract negotiation's


Ta
 
mattyg said:
I added DNS using zones... Krystal seems to lead you down a slightly different route....
Click to expand...
This is why you buy yourself a cheap .uk domain which is near or linked to your "actual" domain so you can test on that first before moving onto a live system.
 
Steveocee said:
This is why you buy yourself a cheap .uk domain which is near or linked to your "actual" domain so you can test on that first before moving onto a live system.
Click to expand...
Every day is a school day

I've about 30 domains. I could have tried on any of them first.

All sorted now. I'm really impressed with what its done.
Summary

The system is essentially fully operational now. To summarise what's live:


  • ✓ Public website
  • ✓ 400+ practice records imported
  • ✓ Agent PWA for new submissions
  • ✓ Driver PWA for info sheet lookup
  • ✓ Staff admin for driver management
  • ✓ Admin portal for approvals and exports
  • ✓ Excel info sheet generator ready once Python photos issue is resolved
We use excel worksheets for practice info sheets with practice details, Photos of where the overnight lockboxes are etc. But never had it central. We've always printed them out and give them to the drivers. But now the reps can add to the PWA and thats uploaded and the drivers can have access all the time. They only really need it once but cover drivers who dont know the sites need them too.

Only issue outstanding are the photos on the historic sheets. But going forward everything will be in one format.

Reps can input all the details, add photos, Click one button to grab Lat.long. 2 buttons for what3words.
I've been putting this off for about 5 years... and a weekend sorted it.
 
Do remember that you have essentially vibe coded something on the Internet. It is going to get unfathomably hammered and battered by malicious actors in every way imaginable. Especially with upload capabilities.

I hope it is secure.
 
aaronyuri said:
Do remember that you have essentially vibe coded something on the Internet. It is going to get unfathomably hammered and battered by malicious actors in every way imaginable. Especially with upload capabilities.

I hope it is secure.
Click to expand...
yep, Still in early stages. No-one can upload anything unless they have a login, which I have to set up first. Even if this isn't secure. I can use it as a "working" model for a developer to see exactly what we need.
 
mattyg said:
yep, Still in early stages. No-one can upload anything unless they have a login, which I have to set up first. Even if this isn't secure. I can use it as a "working" model for a developer to see exactly what we need.
Click to expand...
MFA/OTP, password policy, brute force protection, request limiting, CAPTCHA... there are so many mechanisms that should be deployed on top of a basic username/password combo. A username/password combo is considered far from secure nowadays.

I'm not saying that you can't code something securely with AI - you certainly can. You can't vibe code your way to a secure, stable, and reliable prod-ready system, though. But I guess this is prod now.
 
Login is Via wordpress at the moment. Not direct on the site.

Tomorrow i'll be adding Wordfence and 2FA

I'll put another thread up in a few days so we can rip it to bits.
 
Last edited:
mattyg said:
Login is Via wordpress at the moment. Not direct on the site.

Tomorrow i'll be adding Wordfence and 2FA

I'll put another thread up in a few days so we can rip it to bits.
Click to expand...
Depending on your infra. then Cloudflare Zero Trust, or similar, may be useful likewise WP-toolkit/Patchstack can help with vulnerability notifications.

As it's built upon WP, just make sure you're on top of it (install + plugin updates) as it will get targeted if it's publicly accessible.
 
You must log in or register to reply here.
Back
Top Bottom