justin/new-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(deliverability): Google Postmaster TXT added+verified via Hestia DNS master

Browse source 
DNS is fully automatable: Hestia (cp.carrierone.com, zone owner = justin user)
is the DNS master, HE.net are slaves. Added google-site-verification TXT (id
14464) via v-add-dns-record as root; verified resolving on public resolvers +
HE.net slaves. Owner just clicks Verify in the Postmaster console. Documents the
v-add-dns-record path for future records.
This commit is contained in:
justin 2026-06-18 22:05:01 -05:00
parent 5253f16675
commit 1056705cf9
1 changed files with 16 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

26
docs/deliverability.md
View file

@ -51,16 +51,22 @@ HE.net, so they can't be fully automated. Steps are pre-filled below.
### 🔴 MANUAL 1 — Google Postmaster Tools (Gmail is our biggest blocker)
Gmail's verbatim rejection names "the sending **domain**", so this is priority #1.
1. Go to <https://postmaster.google.com> and sign in with any Google account.
2. Click **+ (Add domain)** -> enter `performancewest.net`.
3. Google shows a **TXT record** like `google-site-verification=XXXXXXXX`.
4. Add it at **HE.net DNS** (dns.he.net -> performancewest.net zone):
- Type: `TXT`, Name: `@` (apex), Value: the full `google-site-verification=...`
string. (This coexists with the existing SPF TXT — multiple TXT records on
the apex are fine.)
5. Wait ~15 min for propagation, then click **Verify** in Postmaster Tools.
6. Data (Domain Reputation, IP Reputation, Spam Rate, Auth pass %, Feedback Loop)
starts populating in 24-48h once volume flows from the consolidated IP.
**DNS is fully automatable** — Hestia (cp.carrierone.com) is the DNS master,
HE.net are slaves. Add records as root: `ssh -p 22022 root@cp.carrierone.com`
then `v-add-dns-record justin performancewest.net "@" TXT '"'"'"<value>"'"'"'`
(zone owner is the `justin` Hestia user; ~30s zone rebuild + slaves sync via the
2h SOA refresh / NOTIFY, usually within a minute).
Status 2026-06-18: **TXT added + verified live** (record id 14464,
`google-site-verification=p8s3RaN5wi81350wToMpdPMho5Gcel4RGT1Q1SXj7vg`),
resolving on 8.8.8.8/1.1.1.1/9.9.9.9 and 4/5 HE.net slaves. Owner just needs to
click **Verify** in the Postmaster console once. Data populates 24-48h after
volume flows from the consolidated IP.
To set up from scratch next time: postmaster.google.com -> +Add domain ->
performancewest.net -> copy the `google-site-verification=...` token -> add via
the Hestia command above -> Verify.
### 🔴 MANUAL 2 — Microsoft SNDS + JMRP (Outlook/Hotmail/Live)
SNDS is **IP-based** (register the sending IPs), JMRP is the complaint feedback loop.