Archive-Team
/
docker-mailserver
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updated Configure SPF (markdown)

This commit is contained in:
Jean-Denis Vauguet 2020-06-01 02:31:12 +02:00
parent 61096f58fe
commit 78b09c20ab
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/content/config/best-practices/spf.md
View File

@ -4,20 +4,22 @@ From [Wikipedia](https://en.wikipedia.org/wiki/Sender_Policy_Framework):
To add a SPF record in your DNS, insert the following line in your DNS zone: To add a SPF record in your DNS, insert the following line in your DNS zone:
; Check that MX is declared ; MX record must be declared for SPF to work
domain.com. IN MX 1 mail.domain.com. domain.com. IN MX 1 mail.domain.com.
; Add SPF record ; SPF record
domain.com. IN TXT "v=spf1 mx ~all" domain.com. IN TXT "v=spf1 mx ~all"
This enables the Softfail mode for SPF. It is a good setting for getting started and testing everything. After verification, you might want to change your SPF record to: `v=spf1 mx -all`, to enforce the policy! This enables the _Softfail_ mode for SPF. You could first add this SPF record with a very low TTL.
_SoftFail_ is a good setting for getting started and testing, as it lets all email through, with spams tagged as such in the mailbox.
After verification, you _might_ want to change your SPF record to `v=spf1 mx -all` so as to enforce the _HardFail_ policy. See https://www.spf-record.com/syntax for more details about SPF policies.
Increment DNS serial and reload configuration. In any case, increment the SPF record's TTL to its final value.
## Backup MX, Secondary MX ## Backup MX, Secondary MX
For whitelisting a IP-Address from the SPF test, you can create a config file(See [policyd-spf.conf](http://www.linuxcertif.com/man/5/policyd-spf.conf/)) and mount that file into `/etc/postfix-policyd-spf-python/policyd-spf.conf` For whitelisting a IP-Address from the SPF test, you can create a config file (see [policyd-spf.conf](http://www.linuxcertif.com/man/5/policyd-spf.conf/)) and mount that file into `/etc/postfix-policyd-spf-python/policyd-spf.conf`.
**Example:** **Example:**