Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| email:configure-dkim-spf-dmarc [2025/03/06 06:55] – willy | email:configure-dkim-spf-dmarc [2025/03/13 14:05] (current) – [Configure proper mail delivery] willy | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Configure proper mail delivery ====== | + | ====== |
| You need access to your domain DNS records, this is mandatory. | You need access to your domain DNS records, this is mandatory. | ||
| Line 115: | Line 115: | ||
| + | |||
| + | ===== DMARC (Domain-based Message Authentication, | ||
| + | |||
| + | OpenDMARC sample configutation can be found [[https:// | ||
| + | |||
| + | This is pretty easy to setup, just edit the **/ | ||
| + | <file - opendmarc.conf> | ||
| + | AuthservID mydomain.com | ||
| + | FailureReports true | ||
| + | RejectFailures false | ||
| + | SPFSelfValidate yes | ||
| + | Socket local:/ | ||
| + | SoftwareHeader true | ||
| + | Syslog true | ||
| + | SyslogFacility mail | ||
| + | TrustedAuthservIDs mail.mydomain.com | ||
| + | HistoryFile / | ||
| + | UMask 0002 | ||
| + | UserID opendmarc | ||
| + | PidFile / | ||
| + | </ | ||
| + | |||
| + | === DNS record === | ||
| + | |||
| + | A DMARC DNS record can be pretty simple or pretty complex. [[https:// | ||
| + | |||
| + | The following is a simple example that you can start from: | ||
| + | < | ||
| + | _dmarc IN TXT ( " | ||
| + | </ | ||
| + | |||
| + | where: | ||
| + | * p: policy, you want reject here most probably | ||
| + | * rua: email address to sent aggregate reports to (optional) | ||
| + | * ruf: email address to sent failure reports to (optional) | ||
| + | |||
| + | === Postfix setup === | ||
| + | |||
| + | OpenDMARC acts as a //milter//, which means a mail filter, for Postfix. The postfix configuration described [[email: | ||
| + | |||
| + | === Start & Autostart OpenDMARC === | ||
| + | |||
| + | <code bash> | ||
| + | rc-update add opendmarc default | ||
| + | / | ||
| + | </ | ||