Randy Calvert

Received your PM. The SPF and DKIM are both good. I signed up for your forum using a custom domain using iCloud.com and it reported no problems. It immediately went into the inbox as expected. I then changed my email address to an Outlook domain which was fine also. I finally changed my email address to Gmail. That message went into the spam folder. In Gmail, if you choose "Show Original", it will give you the raw headers and the status of the SPF/DKIM. For the email change notification, it reported: Original Message Message ID <614f7db4.1c69fb81.1a599.5cae@mx.google.com> Created at: Sat, Sep 25, 2021 at 3:51 PM (Delivered after 2 seconds) From: Our Beloved Ducks Forum <forum@YOURDOMAIN.COM> To: MYEMAIL@gmail.com Subject: Please confirm your email address change SPF: PASS with IP 209.85.220.65 Learn more DKIM: 'PASS' with domain YOURDOMAIN.COM Learn more So it's not a SPF/DKIM issue. You're good on that front. Gmail simply reports: Why is this message in spam? It is similar to messages that were identified as spam in the past. So it's not a technical limitation on your setup/config. My guess is the domain itself has received spam complaints in the past. You might want to use Google's Postmaster Tools site... https://postmaster.google.com Since you're using Google Workspace, you can actually reach out to Google for assistance. https://support.google.com/a/table/3247295?hl=en-AU They should be able to help note why their systems are flagging stuff as spam.

What is the domain name? If you’re not comfortable posting it, PM me. I’ll look up the settings.

https://support.google.com/a/answer/10685031 If you've configured your IPB to send email via SMTP instead of the default PHP (meaning from your server), it looks like the SPF record is: v=spf1 include:_spf.google.com ~all If your server itself is sending mail (via PHP), you would need to do something like: v=spf1 ip4:XXX.XXX.XXX.XXX include:_spf.google.com ~all Where XXX is your server's IP address. If you post the domain name, we can look up the SPF record to see if it's still incorrect. A good tool to check out might be: https://mxtoolbox.com/SuperTool.aspx It will let you check your SPF, DKIM, and DMARC settings to see if it's reporting errors.

No problems for me when using MacOS with Safari or Chrome.

Out of curiosity have you cleared your cookies on the local device? I’m wondering if there is a situation where the local cookie is not matching what the server is expecting as a result of your path change.

It’s on par with my forums.

It should have happened immediately after he said he created it. Have you checked your spam folder to make sure it did not get caught up in a filter somewhere?

I assume someone with that issue would not go into detail on the forums. Instead they would post that they have a security concern and need help privately.

Tested from my Mac laptop on Safari, Chrome, and Firefox without issues. 🙂

It’s not happening on my mobile either via safari or chrome. Will check from my laptop once I get home.

When this happened to me it was due to a permission error. Do guests have access to the page?

We use the term “drinking our own champagne” at work. Something much easier to swallow (literally)! 🤣

Wow... spent the last hour or so reading through the 16 page thread so that I would not just post the same thing that has been said a million times already and hopefully bring some constructive feedback. Communication Using terms such as "modest" when describing an increase of 48% (if someone licensed all applications) and anywhere from 36-60% on a per product basis struck me in a bad way. Statements like "It's not bad news" also did not sit well. In fact, reading the entire message there was nothing at all that came across as "positive". If you're going to break a bunch of bad news, it might help to drop in some "good" tidbit of something to look forward to. Bring both the carrot AND the stick. I understand costs are higher and this is a quality service. I love the product and I have supported the company for literally decades. (I've actually met and spent nearly a week with Matt/Charles/Lindy several years back when I was considering working for IPS.) However instead of simply noting the price change is effective immediately, I would have suggested having it take place after the following renewal. Whenever your NEXT immediate renewal is, it would renew at the existing rate, however on the SUBSEQUENT renewal, the new price would take effect. This gives people time to adjust and prepare. At the end of the day, it won't break the bank for me... however it would have been much more appreciated to have had a bit more heads up. Support I generally try to come to the forums and find the answers to my questions first by searching before I've ever opened a ticket. I also appreciate the fact you're trying to simplify the support process. One thing I might suggest you consider is having a section within the support forums be configured as "Users can see topics posted by other users?" being set to no. This would allow the forums to be utilized, but also allow individuals to ask questions in a more private fashion. Information that is helpful and could be of benefit to the community could be exported using a moderation rule to the "public" forum or into whatever KB system you're looking to implement. What is going to happen to the Support tool within the ACP? One of the features that I loved was that if I had to create a ticket, at the same time a support login was created. By needing to visit the community, there is no way to allow the support team to quickly login and check what is going on. I foresee the following situation playing out: I have a problem and come to the community asking for help. Given that I would have already searched for an answer before posting, I'll create a thread. If it's not a general "how do I" question and instead is "something is broken" situation, the IPS support person will need to create a ticket on my behalf and collect information. They'll also have to ask me to create a support login for them most likely. This will then put the delay back on me to get this information and reply to support who can then engage to help. If this is a situation where "something is broken", typically it's more urgent than a "how do I" question where minutes can matter. If my site is offline or if a major feature is working, having a delay of a full round of back and forth can be painful. Can we come up with a way to reduce this step? If the support tech IS going to create a ticket on my behalf, he/she should have access to everything they need to engage without feeling like we're starting over. I'm hoping those tickets that are created by staff are prioritized so that not only do we have to wait for a ticket to be manually created for us, but then also assigned to someone to actually help. Developers Having the Marketplace and the developer community is a feature I see as being critical to my ability to be successful. There are certain features that are VERY important to my community that I understand that does not make sense to include in the base product. So having 3rd parties that can customize your product in a way that makes me successful is super important for me. Matt noted about it being difficult to determine how to support developers in terms of who should be able to get free licenses, etc. My suggestion on this front is to consider something like Microsoft and some other large software companies do.... offer a tiered developer program. The base developer account gets you a base set of features and access to the developer forums. The next tier includes maybe access to a private slack channel, etc. And the "gold" tier developers might get that a free license as well as maybe something like priority app review. You can define milestones to reach each tier such as XX in sales or YY number of installs. I'm most likely not the best one to suggest what those milestones would be, but I think that would be a great conversation to have with your 3rd party developers. This would make a fair system and reward those that drive the most value within your developer community. It would also provide incentives/goals for those newer developers to reach those higher standards. (You're making an effort to gamify communities, maybe this is an opportunity to do the same thing within the developer community here?) I appreciate no one likes getting bad news and that these are hard things to do when they need to happen. Hopefully some of my notes above can help as you move forward. Finally I hope my feedback is received as it's intended... as thoughtful constructive suggestions and not a general "b***h fest". Good luck and here's to the next twenty years.

My guess is you’re running into an issue with content security policies which prevents your site from being embedded into third party sites Search the admin CP for: Allow community to be embedded in an iframe You might need to change from the default X-Frames-Options which allows content to be linked from just your domain to a custom Content Security Policy. You can Google how to generate a custom CSP header that you can paste into that section when you choose the option.

It's on indefinite hold.

Would LOOOOOOOOOOVE this!

FYI. In order to install the certificate, it has to be installed into the web server itself. Meaning within IPS servers like Apache or NGINX or whatever they use. Any very that you deployed was not actually working as it should be since the only ones who could install it would be IPS. Part of CiC includes the same capabilities provided with CF including object caching (CDN) and bot filtering. Adding another layer can cause issues such as JS not rendering correctly, or CiC blocking random CF IP addresses since they one or two CF IPs would be reaching out to CiC making it look like a DDoS attack. You’re paying for a managed service when using CiC. If you really do want to just play around with this kind of stuff you’re better off self hosted.

I've had a LOT of spam registrations from both China and Russia. It got to the point where I finally used the Cloudflare WAF to deny traffic from those two countries.

Just to add an additional perspective… I’ve run all releases of 4.6 since it’s release with no issues. I’ve generally had new versions applied within 24 hours and the most that I’ve had to do was flush the system cache.

I've seen some folks post about the new version of Elasticsearch, however I'm not sure what is new/changed in the new version that makes it so great. Is there some new killer new capability in the newer version that you're just itching to get your hands on, or is this a case of "it's not the latest version"?

The guide is still valid. I'm guessing your problem is not being able to download the marketplace "S3 Compatible Downloads" plugin from the AdminCP. That's because it has not been flagged for 4.6 yet even though it actually works. Just download it from: Choose that you are installing version 4.4 which will let you download the file without being told to go through the AdminCP marketplace. Once you have it downloaded, go to your AdminCP. Install it by going to the Plugins section and choosing "Manual Installation". Outside of that, follow the guide as written.

If the above suggested steps have not worked, have you also tried rebuilding your caches from inside the AdminCP?

I would suggest opening a support ticket if this did not work. In *theory* this actually should be the solution and it should work. If tickets are still being created despite being set to be ignored, there could potentially be a bug.

It was most likely a system cache that updated. Next time just go into the ACP and have it rebuild caches. That fixed my issue.

Force it to rebuild from the achievements settings area. 🙂