Re: DMARC usage opinion

2019-12-18 Thread Roberto Carna
Perfect!!! Now I understand and I'll to start DMARC implementation with p=none to see what happen. Regards !!! El mié., 18 dic. 2019 a las 7:22, Gregory Heytings () escribió: > > Hi, > > I'd second Viktor Dukhovni's opinion. For the vast majority of mail > servers, a minimalistic DMARC policy

Re: DMARC usage opinion

2019-12-18 Thread Gregory Heytings
Hi, I'd second Viktor Dukhovni's opinion. For the vast majority of mail servers, a minimalistic DMARC policy suffices, just add the following record in the domain's DNS root zone: _dmarc 10800 IN TXT "v=DMARC1; p=none;" If you want to go a step further, you can just monitor how DMARC is

Re: DMARC usage opinion

2019-12-17 Thread Ralph Seichter
* Dave Goodrich: > I can't force another server to use my policy. True, you cannot enforce your DMARC policies. Then again, you are also unable to force third parties to pay attention to your SPF or DKIM settings. The decision about how to process your messages will always lie with the recipient.

Re: DMARC usage opinion

2019-12-17 Thread Ralph Seichter
* Dominic Raferd: > This is exactly what DMARC (p=reject) helps with. I'm pretty sure you meant to say p=none there, didn't you? -Ralph

Re: DMARC usage opinion

2019-12-17 Thread Dave Goodrich
- On Dec 17, 2019, at 12:40 PM, Dominic Raferd domi...@timedicer.co.uk wrote: > On Tue, 17 Dec 2019 at 17:35, Dave Goodrich > wrote: >> >> - On Dec 17, 2019, at 8:14 AM, Roberto Carna >> wrote: >> >> Dear, I have a Postfix server and I have SPF and DKIM TXT records in my DNS. >> Eve

Re: DMARC usage opinion

2019-12-17 Thread Dominic Raferd
On Tue, 17 Dec 2019 at 17:35, Dave Goodrich wrote: > > - On Dec 17, 2019, at 8:14 AM, Roberto Carna > wrote: > > Dear, I have a Postfix server and I have SPF and DKIM TXT records in my DNS. > Everything works OK. > But now I want to implement DMARC, but somebody tells me not to do it becaus

Re: DMARC usage opinion

2019-12-17 Thread Alejandro Cabrera Obed
Thanks to all of you.I'll try DMARC with p=none some days and in this way I can analyze the behaviour of this mechanism. Regards !!! El mar., 17 dic. 2019 a las 14:11, Chris Wedgwood () escribió: > > DMARC policy is best avoided unless you're a bank, or other brand > > that is concerned abou

Re: DMARC usage opinion

2019-12-17 Thread Dave Goodrich
- On Dec 17, 2019, at 8:14 AM, Roberto Carna wrote: Dear, I have a Postfix server and I have SPF and DKIM TXT records in my DNS. Everything works OK. But now I want to implement DMARC, but somebody tells me not to do it because I'd have some problems and I'll have to use a whitelist fo

Re: DMARC usage opinion

2019-12-17 Thread Chris Wedgwood
> DMARC policy is best avoided unless you're a bank, or other brand > that is concerned about phishing of your customers. or have a domain that spammers use as the from/reply-to address

Re: DMARC usage opinion

2019-12-17 Thread @lbutlr
On 17 Dec 2019, at 06:14, Roberto Carna wrote: > I have a Postfix server and I have SPF and DKIM TXT records in my DNS. > Everything works OK. Good. You might look into DNSSEC as well if you haven’;t done that. The setup is a bit tricky butane it’s setup it just works. > But now I want to impl

Re: DMARC usage opinion

2019-12-17 Thread Viktor Dukhovni
> On Dec 17, 2019, at 8:14 AM, Roberto Carna wrote: > > Dear, I have a Postfix server and I have SPF and DKIM TXT records in my DNS. > Everything works OK. > > But now I want to implement DMARC, but somebody tells me not to do it because > I'd have some problems and I'll have to use a whitelis

DMARC usage opinion

2019-12-17 Thread Roberto Carna
Dear, I have a Postfix server and I have SPF and DKIM TXT records in my DNS. Everything works OK. But now I want to implement DMARC, but somebody tells me not to do it because I'd have some problems and I'll have to use a whitelist for several emai addresses, and it's a heavy additional work. Ple