Nox-Rhea WiKi

Outils pour utilisateurs

Outils du site

Piste :
tutoriaux:install-email-server:install-email-server-part-5

Différences

Ci-dessous, les différences entre deux révisions de la page.

Lien vers cette vue comparative

Les deux révisions précédentesRévision précédente
Prochaine révision		Révision précédente
tutoriaux:install-email-server:install-email-server-part-5 [2023/01/06 16:41] – ↷ Page déplacée de tutoriaux:install-email-server-part-5 à tutoriaux:install-email-server:install-email-server-part-5 fratertutoriaux:install-email-server:install-email-server-part-5 [2024/07/06 01:17] (Version actuelle) – frater
Ligne 1: Ligne 1:
-====== Build Email Server From Scratch on Debian – Part 5 - DMARC to Protect Your Domain From Email Spoofing ======+====== Part 5 - DMARC to Protect Your Domain From Email Spoofing ======
  
-In [[tutoriaux:install-email-server-part-4|part 4]] of building your own email server tutorial series, we implemented SPF and DKIM records to improve email deliverability. In this part, we’re going to look at another email authentication technology: **DMARC**. We will discuss how DMARC can benefit you, how to create DMARC record and interpret DMARC report.+In [[tutoriaux:install-email-server:install-email-server-part-4|part 4]] of building your own email server tutorial series, we implemented SPF and DKIM records to improve email deliverability. In this part, we’re going to look at another email authentication technology: **DMARC**. We will discuss how DMARC can benefit you, how to create DMARC record and interpret DMARC report.
  
 ===== What is DMARC? ===== ===== What is DMARC? =====
Ligne 25: Ligne 25:
 ==== 1. Create SPF and DKIM records ==== ==== 1. Create SPF and DKIM records ====
  
-Before creating a DMARC record, you must create [[tutoriaux:install-email-server-part-4|SPF and DKIM]] records first.+Before creating a DMARC record, you must create [[tutoriaux:install-email-server:install-email-server-part-4|SPF and DKIM]] records first.
  
 ==== 2. Identifier alignment ==== ==== 2. Identifier alignment ====
Ligne 97: Ligne 97:
 A good service for DMARC test is https://www.mail-tester.com. Go to the website, you will see a unique email address. Send an email from your domain to this address and then check your score. (This website check all factors that affect email deliverability, not just DMARC.) If DMARC passes, then you will see something like below in the test result. A good service for DMARC test is https://www.mail-tester.com. Go to the website, you will see a unique email address. Send an email from your domain to this address and then check your score. (This website check all factors that affect email deliverability, not just DMARC.) If DMARC passes, then you will see something like below in the test result.
  
-[[dmarc alignment test]]+[[..:dmarc_alignment_test]]
  
 Another way to test DMARC is send an email from your domain to your Gmail account. If DMARC is configured correctly then you will see **dmarc=pass** in the **authentication-results** header. (To view email headers in Gmail, click the ''Show Original'' button, which can be found in the drop-down menu on the right side of an opened email.) Another way to test DMARC is send an email from your domain to your Gmail account. If DMARC is configured correctly then you will see **dmarc=pass** in the **authentication-results** header. (To view email headers in Gmail, click the ''Show Original'' button, which can be found in the drop-down menu on the right side of an opened email.)
  
-[[Gmail SPF and DKIM check scalahosting]]+[[..:gmail_spf_and_dkim_check_scalahosting]]
  
 To pass DMARC check, your emails need to meet one of the following requirements. To pass DMARC check, your emails need to meet one of the following requirements.
Ligne 129: Ligne 129:
 Below is my first weekly report sent from Postmark. mcsignup.com belongs to MailChimp, which is what I use to send newsletters to my mailing list. In my SPF record, I actually allow MailChimp to send emails on my behalf, but I didn’t know that they don’t use my domain name in the Return-Path header for the signup confirmation emails. And they don’t sign emails using my DKIM domain. Below is my first weekly report sent from Postmark. mcsignup.com belongs to MailChimp, which is what I use to send newsletters to my mailing list. In my SPF record, I actually allow MailChimp to send emails on my behalf, but I didn’t know that they don’t use my domain name in the Return-Path header for the signup confirmation emails. And they don’t sign emails using my DKIM domain.
  
-[[dmarc-report-analyzer-postmark]]+[[..:dmarc-report-analyzer-postmark]]
  
 There’s also an unknown source that claims to be linuxbabe.com. There’s also an unknown source that claims to be linuxbabe.com.
  
-[[dmarc aggregate report]]+[[..:dmarc_aggregate_report]]
  
 First, I always treat IP address that doesn’t have reverse DNS record as spam. Then, to identify other unknown sources, I will check if it’s on an email blacklist. debouncer.com tells me that it’s on 13 blacklists. So clearly it’s a spammer trying to impersonate my domain name. First, I always treat IP address that doesn’t have reverse DNS record as spam. Then, to identify other unknown sources, I will check if it’s on an email blacklist. debouncer.com tells me that it’s on 13 blacklists. So clearly it’s a spammer trying to impersonate my domain name.
  
-[[identify unkown sources in DMARC report]]+[[..:identify_unkown_sources_in_dmarc_report]]
  
 To better understand the unknown source and how your domains are used, you can choose to receive forensic report by adding the ruf tag in DMARC record like below. To better understand the unknown source and how your domains are used, you can choose to receive forensic report by adding the ruf tag in DMARC record like below.
tutoriaux/install-email-server/install-email-server-part-5.1673019683.txt.gz · Dernière modification : 2023/01/06 16:41 de frater

Outils de la page

Sauf mention contraire, le contenu de ce wiki est placé sous les termes de la licence suivante : CC Attribution-Noncommercial-Share Alike 4.0 International
CC Attribution-Noncommercial-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki