Changes

From SME Server
Jump to navigationJump to search
824 bytes added ,  07:33, 22 May 2017
Line 1,533: Line 1,533:  
  @ IN TXT "v=spf1 mx a -all"
 
  @ IN TXT "v=spf1 mx a -all"
 
  _dmarc IN TXT "v=DMARC1; p=none; adkim=s; aspf=r; rua=mailto:dmarc-feedback@domain.net; pct=100"
 
  _dmarc IN TXT "v=DMARC1; p=none; adkim=s; aspf=r; rua=mailto:dmarc-feedback@domain.net; pct=100"
All you have to do now is publish those records.
+
All you have to do now is publish those records, but do note that there is a point to consider when publishing the default._domainkey DNS record, as produced by the ''qpsmtpd-print-dns'' command: if the DNS record includes '';t=y'' then as per the DKIM specification ([http://dkim.org/specs/rfc4871-dkimbase.html#keys RFC4781 section 3.6.1]) this means that your ''"...domain is testing DKIM. Verifiers MUST NOT treat messages from signers in testing mode differently from unsigned email, even should the signature fail to verify. Verifiers MAY wish to track testing mode results to assist the signer."''
 +
 
 +
On the other hand, if no '';t=y'' is included, then it means you are intending to use DKIM in production mode. It might be a good idea to publish the DKIM record first in testing mode ('';t=y'' included), check how things go and if everything is alright, remove it.
    
==== Load ====
 
==== Load ====
9

edits

Navigation menu