Cloudflare Proxy - How to hide the IP of the mail subdomain and make it work

[BrutalBirdie]

After reading this forum post I assumed this would work as well
https://community.cloudflare.com/t/teamspeak-setup/58035

hmmm

[robi]

@brutalbirdie It may be good to ping someone at CF or find some docs that SRV records are supposed to do that and is a supported config.

It may have worked for a while due to DNS propagation.

[BrutalBirdie]

@robi maybe my _mail Service entry is wrong?

https://tools.ietf.org/id/draft-daboo-srv-email-05.html#rfc.section.3.2

also for sieve?

https://datatracker.ietf.org/doc/html/rfc5804#section-1.8

[robi]

@brutalbirdie hmm, perhaps the names of the SRV records are important. If you add those, see if it starts flowing again.

[BrutalBirdie]

@robi I want to try it.

[robi]

@brutalbirdie
_imap._tcp
_smtp._tcp
_sieve._tcp

Not sure about sieve..

[BrutalBirdie]

@robi Yea I just updated that and will report back.

also _imaps and not _imap

time to do some reading...

https://datatracker.ietf.org/doc/html/rfc6186

[BrutalBirdie]

@brutalbirdie does not look like its working hmmm

[robi]

Sent out an SOS here: https://twitter.com/vRobM/status/1442197044303577089?s=20

[BrutalBirdie]

@robi Very Nice!

[robi]

I didn't know Argo tunnels were free. So one can hide the mail service and put it thru an Argo tunnel on a subdomain to the world.

https://docs.ibracorp.io/all-guides-in-order/documentation/cloudflare-tunnel

Similarly one can have another domain and IP handle the incoming, which is tunneled to you via Tailscale.

https://docs.ibracorp.io/all-guides-in-order/documentation/tailscale