Haack's Wiki

User Tools

Site Tools

Trace:
computing:spfdkim

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Last revisionBoth sides next revision
computing:spfdkim [2019/08/12 17:55] – oemb1905computing:spfdkim [2019/12/30 02:14] – oemb1905
Line 9: Line 9:
 #hacking #freesoftware #gnulinux  #hacking #freesoftware #gnulinux 
  
-This tutorial is a bit simpler than the last one.  I finally got tired of my email triggering recipients SPAM filters, and worse, I was sometimes flagged by other tech colleagues' services because of my domains lacking these records.  After a bit of searching online, I found that for spf records, you need to specify your MX handler and any servers you use to send from on behalf of that domain.  In my case, I use a GSuite for my email and a Digital Ocean VPS for one of my external servers.  I went to my DNS host at afraid.org and entered a TXT record parsed as follows:+I finally got tired of my email triggering recipients SPAM filters, and worse, I was sometimes flagged by other tech colleagues' services because of my domains lacking these records.  After a bit of searching online, I found that for spf records, you need to specify your MX handler and any servers you use to send from on behalf of that domain.  In my case, I use a GSuite for my email and a Digital Ocean VPS for one of my external servers.  I went to my DNS host at afraid.org and entered a TXT record parsed as follows:
  
   v=spf1 a mx include:_spf.google.com mx:smtp.haacksnetworking.com ~all   v=spf1 a mx include:_spf.google.com mx:smtp.haacksnetworking.com ~all
Line 26: Line 26:
 Of course, all of this is simply an exercise at shooting at the dark unless you validate it all.  Of course, sending emails to your friends and asking them if it got tagged as SPAM is pretty ineffective, so I hunted online and found the [[https://dkimvalidator.com|DKIM Validator]] which validates both exchanges. Of course, all of this is simply an exercise at shooting at the dark unless you validate it all.  Of course, sending emails to your friends and asking them if it got tagged as SPAM is pretty ineffective, so I hunted online and found the [[https://dkimvalidator.com|DKIM Validator]] which validates both exchanges.
  
-A big thanks to this hacker for finally providing a sensible tutorial to riff off of:  [[https://www.stavros.io/posts/how-properly-configure-google-apps-email/|Stavros' Stuff]].+[Update: Added DMARC]
  
- --- //[[oemb1905@jonathanhaack.com|oemb1905]] 2019/08/12 17:34//+Okay, now that you have both an SPF record and DKIM record you can optionally set up another TXT record for DMARC. This will tell the recipient that there is an SPF/DKIM record in place and who to contact in cases of violation. The destination was parsed as follows: 
 + 
 +  v=DMARC1; p=none; pct=100; rua=mailto:user@domain.com 
 + 
 +On afraid .org, this looks like: 
 + 
 +{{ :computing:dmarc.png |}} 
 + 
 +A big thanks to this hacker for finally providing a sensible tutorial to riff off of:  [[https://www.stavros.io/posts/how-properly-configure-google-apps-email/|Stavros' Stuff]].  Also, thanks to this hacker [[https://www.linuxbabe.com/mail-server/create-dmarc-record|Linuxbabe]] for her tutorial. 
 + 
 + --- //[[jonathan@haacksnetworking.com|oemb1905]] 2019/12/30 02:13//
  
computing/spfdkim.txt · Last modified: 2022/12/11 05:50 by oemb1905

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
GNU Free Documentation License 1.3 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki