Hey #email #nerds and #ServerAdmin people, I know about #DMARC, #SPF, and #DKIM and stuff. BUT.
Idea: system where email servers generate a #GUID identifier for that specific email and keep it in a database. Other servers and email clients can then just ping the #domain that the email says its from and confirm the real domain sent it.
Like, why couldn't this be a thing? Seems like it would completely stop those #spam emails that pretend to be from #PayPal or #banks.
Does anyone has a contact to the Joint Research Centre (#JRC) [0] or My Email Communications Security Assessment (#MECSA) [1] (both from the #EU)?
I find the tool great... if it would parse #SPF/#IPv6 correctly und actually check for #DNSSEC...
I've tried emailing them, but no response :/
Links:
[0]: https://joint-research-centre.ec.europa.eu/
[1]: https://mecsa.jrc.ec.europa.eu/
J'ai un nom de domaine chez #o2switch et depuis quelques jours, je ne peux plus envoyer de mails à mes contacts Gmail, à cause d'un problème de configuration SPF* ou DKIM.
Quand je lis cet article
https://faq.o2switch.fr/hebergement-mutualise/tutoriels-cpanel/authentification-email-spf-dkim
Ça n'a pas l'air simple à résoudre.
Parmi vous, les personnes qui lisez ce message, vous avez réussi à résoudre ce problème facilement chez o2switch ? Comment on fait ?
* jusqu'à présent, le SPF était uniquement l'indice de protection d'une crème solaire
I've released an SPF filter for OpenSMTPD: https://netsend.nl/opensmtpd-filter-spf/
Le courrier électronique est une cible privilégiée pour le spam, le phishing et autres formes d'escroqueries.
Découvrez DKIM, DMARC et SPF, trois techniques d’authentification de l’émetteur qui s’inscrivent dans la boîte à outils des organisations qui cherchent à lutter durablement contre ces abus.
Prochaines sessions : 27 et 28 mars 2025
22 et 23 mai 2025
Découvrez le programme complet et inscrivez-vous ici : https://www.afnic.fr/produits-services/formations/dkim-dmarc-spf-securiser-son-courrier-electronique-grace-au-dns/
I am #selfhosting a new #email engine on a new domain.
In preparation for a personal #Googlemail exodus.
But even though I have my #SPF and #DKIM record proper
#Gmail reject the test emails.
Without any bounces either, it just black holes them.
So over this week, I have a small script that randomly email random emails to Gmail to "build reputation".
We will see how that goes.
𝐇𝐨𝐰 𝐭𝐨 𝐬𝐞𝐜𝐮𝐫𝐞 𝐲𝐨𝐮𝐫 𝐞𝐦𝐚𝐢𝐥 𝐰𝐢𝐭𝐡 𝐒𝐏𝐅, 𝐃𝐊𝐈𝐌 𝐚𝐧𝐝 𝐃𝐌𝐀𝐑𝐂
Email is usually a critical part of corporate communication these days. Without a functional email, companies can lose orders and therefore money for example. Therefore, email security should be a very high priority. But equally, increasing email deliverability should be very important.
In today's video, we'll look at how to increase email security from the perspective of protecting your domain. In other words, so that an outsider can't impersonate you, send emails under your domain, and thereby damage your company's reputation or credibility by, for example, sending out spam or, heaven forbid, fake invoices for payment from your domain.
We'll also look at how to increase the deliverability of your messages. That is to say, so that regular emails leaving your domain are delivered to the recipient, and don't fall into spam or get completely thrown away by the recipient's mail server.
We'll focus on three basic options for email security and deliverability that every organization should have implemented.
Watch my YouTube video bellow
https://youtu.be/xtmDDl1rjOc
Irgendwie bin ich vielleicht einem Bug im #SPF-Modul von #Spamassassin auf der Spur. Ich habe heute 10 Stunden Dokus gelesen, mich durch den Perl-Quelltext gewühlt, verschiedene Konfigurationen ausprobiert und bestimmt 100 Testmails geschickt. Am Ende verhärtet sich der Verdacht, dass der Parser für die SPF-Regeln vielleicht ein Problem hat. Aber jetzt erst einmal Wochenende, Montag geht's weiter. Wenn ich das schaffe abzuschalten.
Is SPF Simply Too Hard For Application Developers?
The Sender Policy Framework (SPF) is unloved by some, because it conflicts with some long-established SMTP email use cases. But is it also just too hard to understand and to use correctly for application developers? https://nxdomain.no/~peter/is_spf_too_hard_for_appdevs.html
(2016 but still holds) #smtp #spf #mail #spam #antispam #security #openbsd #spamd
TR-92 - Unused Domain Names and the Risks of Missing DNS SPF Records
Many organizations maintain a broad portfolio of domain names, acquired for branding, strategic planning, or defensive purposes. However, a significant portion of these domains often remains unused or lacks proper DNS configurations...
Read more https://www.circl.lu/pub/tr-92/
MikroTik botnet uses misconfigured SPF DNS records to spread malware
https://www.bleepingcomputer.com/news/security/mikrotik-botnet-uses-misconfigured-spf-dns-records-to-spread-malware/
Unveiling Email Security: The Surprising Truth Behind Sending Emails Without Credentials
What if you could send emails without entering any credentials? A deep dive into the mechanics of email security reveals vulnerabilities that could allow anyone to spoof identities. Discover how SPF, ...
https://www.europesays.com/1755270/ France’s Nuclear Power Industry Makes Its Presence Felt During the Ukraine Crisis ― Energy Cooperation with Europe and the United States and the Future of the Procurement of Uranium from Niger | List of Articles | International Information Network Analysis #InternationalInformation #nuclear #SPF #U.S.A
Learn and Test DMARC
https://www.learndmarc.com/
Or how email works explained by an example,
"Die fordern alle, dass wir einen #SPF-Record für unseren Mailserver brauchen"
"Trag doch einfach 'v=spf1 a +all' ein"
"Oh ja, gute Idee!"