Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
tools:emailsec [2023/04/21 10:25] – [DKIM] darron | tools:emailsec [2023/05/18 21:05] (current) – [DKIM] darron | ||
---|---|---|---|
Line 1: | Line 1: | ||
==== E-mail security==== | ==== E-mail security==== | ||
+ | <wrap right> | ||
+ | {{tools: | ||
+ | </ | ||
How to use e-mail security features in EXIM SMTP with BIND DNS. | How to use e-mail security features in EXIM SMTP with BIND DNS. | ||
Line 13: | Line 15: | ||
__Zone__ | __Zone__ | ||
< | < | ||
- | 1H IN TXT " | + | 1H IN TXT " |
</ | </ | ||
Line 24: | Line 26: | ||
===DKIM=== | ===DKIM=== | ||
- | [[https:// | + | [[https:// |
==OPENSSL== | ==OPENSSL== | ||
- | Openssl | + | Openssl |
< | < | ||
Line 69: | Line 71: | ||
"use output from above" | "use output from above" | ||
</ | </ | ||
+ | |||
+ | The " | ||
__Test__ | __Test__ | ||
Line 102: | Line 106: | ||
remote_smtp_dkim_DOMAIN: | remote_smtp_dkim_DOMAIN: | ||
| | ||
+ | | ||
+ | | ||
| | ||
| | ||
| | ||
</ | </ | ||
+ | |||
+ | For SPF the HOSTNAME must resolve to the specified IP address(es). | ||
The DKIM domain needn' | The DKIM domain needn' | ||
===DMARC=== | ===DMARC=== | ||
- | [[https:// | + | [[https:// |
+ | |||
+ | E-mails that fail SPF and DKIM tests may be processed according to this table. | ||
+ | |||
+ | ^Policy^Effect^ | ||
+ | |none|Mail delivered normally| | ||
+ | |quarantine|Mail delivered to spam folder| | ||
+ | |reject|Mail rejected and not delivered| | ||
+ | |||
+ | For reporting, providers such as google send details of e-mails that pass and fail. For google the reports originate from noreply-dmarc-support@google.com. | ||
==BIND== | ==BIND== | ||
Line 118: | Line 135: | ||
to reject or quarantine. | to reject or quarantine. | ||
+ | __Zone__ | ||
< | < | ||
_dmarc IN TXT " | _dmarc IN TXT " | ||
+ | </ | ||
+ | |||
+ | Once you are confident that you are sending e-mail from the correct server(s) in with the correct signature(s) then the policy can be made more strict. | ||
+ | |||
+ | __Test__ | ||
+ | < | ||
+ | dig in txt _dmarc.DOMAIN | ||
</ | </ | ||
See [[https:// | See [[https:// | ||
+ | |||
+ | |||
+ | |||
+ | ===Resources=== | ||
+ | |||
+ | [[https:// | ||
+ | |||
+ | === Export === | ||
+ | |||
+ | [[: | ||