Re: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Ignacio García
El 20/08/2019 a las 2:20, Kevin Darcy escribió: DNSBL is by IP, true, but there are other forms of "SMTP blacklist" that are by domain. Getting one's domain on one or more of those lists would help avoid the impact of someone trying to use the domain to spoof malicious email. Sure, you could wa

Re: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Kevin Darcy
[ Classification Level: PUBLIC ] DNSBL is by IP, true, but there are other forms of "SMTP blacklist" that are by domain. Getting one's domain on one or more of those lists would help avoid the impact of someone trying to use the domain to spoof malicious email. Sure, you could wait until *after* t

Re: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Kevin Darcy
[ Classification Level: PUBLIC ] MXes are for *receiving* mail of course. The request is about *sending* mail. Setting the SPF record to "-all" is probably about the best you can do, since AFAIK there is no universally-recognized way to signal "domain X never sends mail". Ironically, in order to

Re: EDITED: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Karl Lovink via bind-users
Hi, We (Arnold Holzel and I) gave a talk about SPF (with macros), DKIM, DMARC and MTA-STS during Black Hat USA two weeks ago. The slides contains example DNS records you can use. Also a kink to a Splunk app for get insight whether Your domain are abused. Link: https://i.blackhat.com/USA-19/Th

Re: EDITED: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Dean Eckstrom
You might also want to set a DMARC Policy record with appropriate 'rua' and 'ruf' email reporting addresses. rua and ruf depend on remote mail centers being willing to send you this information (which is not always consistently done). Yet the reports might provideoccasional feedback if you ar

Re: EDITED: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread m3047
Hi, I would think declaring SPF as you say is the right course of action. I would consider setting up DMARC as well. Whether it's your intention or not, if you set up DMARC (a way for people to report mail claiming to be from you) you've essentially created a honey pot; maybe somebody will be

Re: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Barry Margolin
In article , Ignacio García wrote: > Hi there. > > Thanks for your support. First message to the list, sorry if already > posted a similar question, but I haven't found mention anywhere. > > I have to set up dns records for a domain just for a web site, for which > we will NEVER send emails

Re: EDITED: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Matus UHLAR - fantomas
On 19.08.19 15:01, Ignacio García wrote: I have to set up dns records for a domain just for a web site, for which we will NEVER send emails (though we might receive some from old customers), so I would like to announce somehow that emails sent from this domain should always be disregarded. I wa

EDITED: Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Ignacio García
(Sorry, there was a typo in the original message) Hi there. Thanks for your support. First message to the list, sorry if already posted a similar question, but I haven't found mention anywhere. I have to set up dns records for a domain just for a web site, for which we will NEVER send emails

Proper Way to Configure a Domain which never sends emails

2019-08-19 Thread Ignacio García
Hi there. Thanks for your support. First message to the list, sorry if already posted a similar question, but I haven't found mention anywhere. I have to set up dns records for a domain just for a web site, for which we will NEVER send emails (though we might receive some from old customers)