Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread John R. Levine
The reject will only work when DKIM AND SPF are failing. So you have to setup SPF too. -all does the magic. Actually, no. DMARC only passes when DKIM or SPF passes. In the absence of any SPF, that's not a pass so DMARC will fail. It's a good idea to publish the SPF -all but in this case DMA

Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread Karl Lovink via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 The reject will only work when DKIM AND SPF are failing. So you have to setup SPF too. -all does the magic. cheers, Karl On 20/08/2019 20:12, John Levine wrote: > In article > you write: >> El 20/08/2019 a las 9:28, Marco Davids via bind-users es

Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread John Levine
In article you write: >El 20/08/2019 a las 9:28, Marco Davids via bind-users escribió: >> A TXT _dmarc.domain.tld "v=DMARC1; p=reject" might also be useful. >Wouldn't that imply having DKIM set up for the domain? No, of course not. It says that if mail isn't authenticated, reject it. An excell

Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread Barry Margolin
In article , Kevin Darcy wrote: > [ Classification Level: PUBLIC ] Huh? Why does something sent to a public mailing list need an explicit "classification level"? > > MXes are for *receiving* mail of course. The request is about *sending* > mail. True, but there's a common assumption that ma

Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread Scott Morizot
On Tue, Aug 20, 2019 at 5:46 AM Ignacio García wrote: > El 20/08/2019 a las 9:28, Marco Davids via bind-users escribió: > > A TXT _dmarc.domain.tld "v=DMARC1; p=reject" might also be useful. > > > > Wouldn't that imply having DKIM set up for the domain? > > > Short answer is no since nothing in D

Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread Ignacio García
El 20/08/2019 a las 9:28, Marco Davids via bind-users escribió: A TXT _dmarc.domain.tld "v=DMARC1; p=reject" might also be useful. -- Marco Wouldn't that imply having DKIM set up for the domain? -- Ignacio ___ Please visit https://lists.isc.org/ma

Internet Systems Consortium has a position open (Support Engineer III)

2019-08-20 Thread Michael McNally
Hello, bind-users list members, I hope you'll excuse me for posting something a little bit out of the ordinary for this list, but there are perhaps some in this community who will be interested to know that we are looking for a candidate to fill the position of Support Engineer III at Internet Sys

Re: Proper Way to Configure a Domain which never sends emails

2019-08-20 Thread Marco Davids via bind-users
A TXT _dmarc.domain.tld "v=DMARC1; p=reject" might also be useful. -- Marco On 19/08/2019 23:31, Kevin Darcy wrote: > [ Classification Level: PUBLIC ] > > MXes are for *receiving* mail of course. The request is about *sending* > mail. > > Setting the SPF record to "-all" is probably about the b