Synchronet v3.19b-Win32 (install) has been released (Jan-2022).

You can donate to the Synchronet project using PayPal.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
howto:emailsec [2020/07/07 21:32] – created grasshopperhowto:emailsec [2020/07/07 21:42] (current) grasshopper
Line 25: Line 25:
  
 ==== Creating the 'TXT' records for security ==== ==== Creating the 'TXT' records for security ====
-  - Still logged into one's provider of the owned domain name, create a "TXT" record (i.e. This will be the SPF record)+  - Still logged into one's provider of the owned domain name, create a "TXT" record (i.e. This will be the SPF((Sender Policy Framework)) record)
     - The host name should be the "@" symbol     - The host name should be the "@" symbol
     - The TXT Value will contain the information that will state which domain names and IPs are OK if email comes from one of those. One will want to include all possible Domain Name/IP addresses that could serve up email. This part takes a little more effort to get the text right. Thankfully there are free tools available on the internet that will generate the SPF text for you. These are a couple of those sites.     - The TXT Value will contain the information that will state which domain names and IPs are OK if email comes from one of those. One will want to include all possible Domain Name/IP addresses that could serve up email. This part takes a little more effort to get the text right. Thankfully there are free tools available on the internet that will generate the SPF text for you. These are a couple of those sites.
       - https://www.spfwizard.net/       - https://www.spfwizard.net/
       - https://www.dmarcanalyzer.com/spf/spf-record-generator/ (shows how to create an SPF record manually)       - https://www.dmarcanalyzer.com/spf/spf-record-generator/ (shows how to create an SPF record manually)
-  - Create another "TXT" record (i.e. This will be the DMARC record)+  - Create another "TXT" record (i.e. This will be the DMARC((Domain-based Message Authentication, Reporting, and Conformance)) record)
     - The host name for this record has to be _dmarc     - The host name for this record has to be _dmarc
     - The value specifies where to send reports of abuse of one's domain name.     - The value specifies where to send reports of abuse of one's domain name.
     - There is an online tool to help with the creation of the value of this record:     - There is an online tool to help with the creation of the value of this record:
       - https://dmarcian.com/dmarc-record-wizard/ (there could be other's, this was just the first one I found)       - https://dmarcian.com/dmarc-record-wizard/ (there could be other's, this was just the first one I found)
-  - Create yet another "TXT" record (this is the final one and it is the DKIM record)+  - Create yet another "TXT" record (this is the final one and it is the DKIM((Domain Keys Identified Mail)) record)
     - This record will allow for the verification of the signage on the email that is placed by the MTA((Mail Transport Agent)) using a private key and the DKIM record has the public key. Thus emails can be verified against the DNS record.     - This record will allow for the verification of the signage on the email that is placed by the MTA((Mail Transport Agent)) using a private key and the DKIM record has the public key. Thus emails can be verified against the DNS record.
     - **Note:** DKIM capabilities is currently __not__ available in Synchronet.     - **Note:** DKIM capabilities is currently __not__ available in Synchronet.
Line 50: Line 50:
 ===== See Also ===== ===== See Also =====
   * [[:howto:|howto index]]   * [[:howto:|howto index]]
 +  * [[:server:mail:|Mail Server]]
  
 {{tag>}} {{tag>}}