101010.pl

Joseph Leedy :magento:TIL that if you use <a href="https://phpc.social/tags/Fastmail" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fastmail</a>’s <a href="https://phpc.social/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> for your e-mail domain, by default your <a href="https://phpc.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> <a href="https://phpc.social/tags/TXT" class="mention hashtag" rel="nofollow noopener" target="_blank">#TXT</a> record is set to “p=none.” I highly recommend going into your Fastmail DNS settings, disabling the default DMARC TXT record, and adding a new custom record with “p=quarantine” or “p=reject.”I wish I’d have known and fixed this years ago. (I discovered it accidentally while playing with MXToolbox.)

Feoh<a href="https://fosstodon.org/@jimsalter" class="u-url mention" rel="nofollow noopener" target="_blank">@jimsalter</a> <a href="https://tilde.zone/@dashdsrdash" class="u-url mention" rel="nofollow noopener" target="_blank">@dashdsrdash</a> and anyone else who might know.A while back I created the necessary DKIM/DMARC (I think) DNS records to keep DNS from dropping email to my custom domain on the floor.But now I get a ton of automated seeming DMARC emails.I've never seen a bad report in any of them, so I'll admit to having stopped looking. It's not like most modern email clients can cope with the .tar.gz contents anyway (Yes I know, read mail with mutt, and I do, but I also use the web UI because I'm a lazy cretin :).Is there a way to make these actually useful? Should I maybe just change the records to send to a + variant of my address so I can filter them into a folder and ignore them like I'm doing now but with extra clutter? :)Thanks<a href="https://oldbytes.space/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a> <a href="https://oldbytes.space/tags/dmarc" class="mention hashtag" rel="nofollow noopener" target="_blank">#dmarc</a> <a href="https://oldbytes.space/tags/dkim" class="mention hashtag" rel="nofollow noopener" target="_blank">#dkim</a> <a href="https://oldbytes.space/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a>

Django<a href="https://social.bund.de/@bsi" class="u-url mention" rel="nofollow noopener" target="_blank">@bsi</a> Da kommen die aber schnell darauf. Das hab ich schon seit sehr vielen Jahren im Einsatz: <a href="https://dokuwiki.nausch.org/doku.php/centos:mail_c7:start#spam-_und_virenschutz_mechanismen_unter_centos_7x" rel="nofollow noopener" translate="no" target="_blank">https://dokuwiki.nausch.org/doku.php/centos:mail_c7:start#spam-_und_virenschutz_mechanismen_unter_centos_7x</a><a href="https://mastodon.social/tags/SPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#SPF</a> <a href="https://mastodon.social/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a> <a href="https://mastodon.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> <a href="https://mastodon.social/tags/SRS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SRS</a>

Piiieps & Brummm<a href="https://chaos.social/tags/fediask" class="mention hashtag" rel="nofollow noopener" target="_blank">#fediask</a> I operate my own mail server. I followed the great instructions in "Run your own mail server" by <a href="https://io.mwl.io/@mwl" class="u-url mention" rel="nofollow noopener" target="_blank">@mwl</a> Last night I had the idea, that it would be nice to publish a public key for S/MIME in my <a href="https://chaos.social/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> like the stuff for <a href="https://chaos.social/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a>, <a href="https://chaos.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> and <a href="https://chaos.social/tags/DANE" class="mention hashtag" rel="nofollow noopener" target="_blank">#DANE</a>. I would really like to automatically get <a href="https://chaos.social/tags/encrypted" class="mention hashtag" rel="nofollow noopener" target="_blank">#encrypted</a> emails by other people.Turns out, this idea isn't new, but <a href="https://chaos.social/tags/RFC8162" class="mention hashtag" rel="nofollow noopener" target="_blank">#RFC8162</a> from 2017 is marked experimental.Any news on this?Please boost. I really would like new information about this.

Jonathan Kamens 86 47I've ranted before about <a href="https://federate.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> and whether it's worth private mail-server admins implementing. Today's rant: the reference implementation, <a href="https://github.com/trusteddomainproject/OpenDMARC" rel="nofollow noopener" translate="no" target="_blank">https://github.com/trusteddomainproject/OpenDMARC</a>, has been abandoned for ~4 years, and its maintainers, <a href="http://www.trusteddomain.org/" rel="nofollow noopener" translate="no" target="_blank">http://www.trusteddomain.org/</a>, are completely AWOL. Linux distro maintainers have had to do proxy maintenance themselves, picking and choosing patches from pull requests submitted to the project to add to their distributions. This sucks. <a href="https://federate.social/tags/FOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSS</a> <a href="https://federate.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMTP</a> <a href="https://federate.social/tags/OpenDMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenDMARC</a> <a href="https://federate.social/tags/TrustedDomainProject" class="mention hashtag" rel="nofollow noopener" target="_blank">#TrustedDomainProject</a>

:debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse:I find it really sad that Trusteddomainproject (authors of OpenDMARC) is basically dead<a href="https://social.linux.pizza/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a> <a href="https://social.linux.pizza/tags/dmarc" class="mention hashtag" rel="nofollow noopener" target="_blank">#dmarc</a> <a href="https://social.linux.pizza/tags/smtp" class="mention hashtag" rel="nofollow noopener" target="_blank">#smtp</a>

BLACKVOID ⚫️Boy do I love spending time with <a href="https://mastodon.social/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a> services! (NOT!).Damn <a href="https://mastodon.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> requirements for bulk sending!Now I’m not one that sends newsletters all the time (maybe once/twice a year), but even when using a service such as <a href="https://mastodon.social/tags/mailgun" class="mention hashtag" rel="nofollow noopener" target="_blank">#mailgun</a> there are still special settings that need to be configured (while I am not the one that has over 5k/day newsletter sending setup) such as <a href="https://mastodon.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a>.Rant over -.-

Jan SchaumannSystem AdministrationWeek 8, The Simple Mail Transfer Protocol, Part IIIIn this video, we look at ways to combat Spam. In the process, we learn about email headers, the Sender Policy Framework (<a href="https://mstdn.social/tags/SPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#SPF</a>), DomainKeys Identified Mail (<a href="https://mstdn.social/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a>), and Domain-based Message Authentication, Reporting and Conformance (<a href="https://mstdn.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a>). <a href="https://mstdn.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMTP</a> doesn't seem quite so simple any more...<a href="https://youtu.be/KwCmv3GHGfc" rel="nofollow noopener" translate="no" target="_blank">https://youtu.be/KwCmv3GHGfc</a><a href="https://mstdn.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://mstdn.social/tags/SRE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SRE</a> <a href="https://mstdn.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a>

Hacker NewsSpammers are better at SPF, DKIM, and DMARC than everyone else<a href="https://toad.social/@grumpybozo/114213600922816869" rel="nofollow noopener" translate="no" target="_blank">https://toad.social/@grumpybozo/114213600922816869</a><a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/Spammers" class="mention hashtag" rel="nofollow noopener" target="_blank">#Spammers</a> <a href="https://mastodon.social/tags/SPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#SPF</a> <a href="https://mastodon.social/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a> <a href="https://mastodon.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Marcos Dione"The stats we collect for the <a href="https://en.osm.town/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SpamAssassin</a> project (mass-scan results from participating sites) have long shown that spammers are more consistent at making <a href="https://en.osm.town/tags/SPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#SPF</a>, <a href="https://en.osm.town/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a>, and <a href="https://en.osm.town/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> correct than are legitimate senders. DMARC in particular has no discernible benefit for most senders, so it is a useless signal.Rejecting mail based solely on authentication failures of those deeply flawed authentication methods does more harm than good."<a href="https://www.jwz.org/blog/2025/03/dmarc-and-spf/#comment-257743" rel="nofollow noopener" translate="no" target="_blank">https://www.jwz.org/blog/2025/03/dmarc-and-spf/#comment-257743</a><a href="https://en.osm.town/tags/mail" class="mention hashtag" rel="nofollow noopener" target="_blank">#mail</a>

Hans van ZijstI just found out that Dovecot 2.4 is a crippled version of Dovecot 2.3: no more clustering support, the director function has been removed. If you want to do clustering now, you'll have to buy a Pro license. <a href="https://doc.dovecot.org/2.4.0/installation/upgrade/2.3-to-2.4.html#removed-features" rel="nofollow noopener" target="_blank">https://doc.dovecot.org/2.4.0/installation/upgrade/2.3-to-2.4.html#removed-features</a> So, although I've used Dovecot for years, both private and for work, it seems like this is the end of the line for me. At the same time I see what @<a href="https://mastodon.social/@stalwartlabs" rel="nofollow noopener" target="_blank">Stalwart Labs</a> can do. Yes, clustering, for one. And a whole lot more, including bayesian classification, analysis of DMARC reports and even a reputation database. I'm really impressed by what it can do. Bit hesitant about the fact that it's still only version 0.11.5 though, smells alpha... Looks like Stalwart is the future for me. <a href="https://stalw.art/docs/cluster/overview" rel="nofollow noopener" target="_blank">https://stalw.art/docs/cluster/overview</a> #<a class="" href="https://social.woefdram.nl/search?tag=Dovecot" rel="nofollow noopener" target="_blank">Dovecot</a> #<a class="" href="https://social.woefdram.nl/search?tag=Stalwart" rel="nofollow noopener" target="_blank">Stalwart</a> #<a class="" href="https://social.woefdram.nl/search?tag=E-mail" rel="nofollow noopener" target="_blank">E-mail</a> #<a class="" href="https://social.woefdram.nl/search?tag=DMARC" rel="nofollow noopener" target="_blank">DMARC</a>

Fox Ritch :fjoxicon:why do companies send dmarc email with a xml attachted, like just put it in the body so i odnt need to download it. its not even like that are programs the gather them and make them easely viewable. its just stupid<a href="https://mastodon.hostnetwork.xyz/tags/mail" class="mention hashtag" rel="nofollow noopener" target="_blank">#mail</a> <a href="https://mastodon.hostnetwork.xyz/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a> <a href="https://mastodon.hostnetwork.xyz/tags/dmarc" class="mention hashtag" rel="nofollow noopener" target="_blank">#dmarc</a>

Julien RiouI've Got Mail <a href="https://bonesmoses.org/2025/ive-got-mail/" rel="nofollow noopener" translate="no" target="_blank">https://bonesmoses.org/2025/ive-got-mail/</a><a href="https://hachyderm.io/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a> <a href="https://hachyderm.io/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a> <a href="https://hachyderm.io/tags/postgrey" class="mention hashtag" rel="nofollow noopener" target="_blank">#postgrey</a> <a href="https://hachyderm.io/tags/dovecot" class="mention hashtag" rel="nofollow noopener" target="_blank">#dovecot</a> <a href="https://hachyderm.io/tags/roundcube" class="mention hashtag" rel="nofollow noopener" target="_blank">#roundcube</a> <a href="https://hachyderm.io/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://hachyderm.io/tags/dkim" class="mention hashtag" rel="nofollow noopener" target="_blank">#dkim</a> <a href="https://hachyderm.io/tags/dmarc" class="mention hashtag" rel="nofollow noopener" target="_blank">#dmarc</a> <a href="https://hachyderm.io/tags/mailinabox" class="mention hashtag" rel="nofollow noopener" target="_blank">#mailinabox</a> <a href="https://hachyderm.io/tags/mailu" class="mention hashtag" rel="nofollow noopener" target="_blank">#mailu</a> <a href="https://hachyderm.io/tags/mailcow" class="mention hashtag" rel="nofollow noopener" target="_blank">#mailcow</a> <a href="https://hachyderm.io/tags/stalwart" class="mention hashtag" rel="nofollow noopener" target="_blank">#stalwart</a> <a href="https://hachyderm.io/tags/protonmail" class="mention hashtag" rel="nofollow noopener" target="_blank">#protonmail</a> <a href="https://hachyderm.io/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a>

l<a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener" target="_blank">@delta</a> Just when I wanted to switch to Delta Chat, <a href="https://fosstodon.org/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a> went down as well.<a href="https://fosstodon.org/tags/EmailDown" class="mention hashtag" rel="nofollow noopener" target="_blank">#EmailDown</a> <a href="https://fosstodon.org/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a>

jordanHey <a href="https://mastodon.jordanwages.com/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a> <a href="https://mastodon.jordanwages.com/tags/nerds" class="mention hashtag" rel="nofollow noopener" target="_blank">#nerds</a> and <a href="https://mastodon.jordanwages.com/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a> people, I know about <a href="https://mastodon.jordanwages.com/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a>, <a href="https://mastodon.jordanwages.com/tags/SPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#SPF</a>, and <a href="https://mastodon.jordanwages.com/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a> and stuff. BUT.Idea: system where email servers generate a <a href="https://mastodon.jordanwages.com/tags/GUID" class="mention hashtag" rel="nofollow noopener" target="_blank">#GUID</a> identifier for that specific email and keep it in a database. Other servers and email clients can then just ping the <a href="https://mastodon.jordanwages.com/tags/domain" class="mention hashtag" rel="nofollow noopener" target="_blank">#domain</a> that the email says its from and confirm the real domain sent it.Like, why couldn't this be a thing? Seems like it would completely stop those <a href="https://mastodon.jordanwages.com/tags/spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#spam</a> emails that pretend to be from <a href="https://mastodon.jordanwages.com/tags/PayPal" class="mention hashtag" rel="nofollow noopener" target="_blank">#PayPal</a> or <a href="https://mastodon.jordanwages.com/tags/banks" class="mention hashtag" rel="nofollow noopener" target="_blank">#banks</a>.

Stéphane BortzmeyerEmail servers: Stalwart claims to replace the different programs (Postfix, Dovecot, SpamAssassin, OpenDKIM, etc) by one program."Installing is simple'" (curl | sudo bash…)Bonus: there is an integrated analysis of <a href="https://mastodon.gougere.fr/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> reports :-)<a href="https://mastodon.gougere.fr/tags/FOSDEM" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSDEM</a>

lSpeaking of the trending <a href="https://fosstodon.org/tags/aipoisoning" class="mention hashtag" rel="nofollow noopener" target="_blank">#aipoisoning</a> tarpits such as <a href="https://iocaine.madhouse-project.org/" rel="nofollow noopener" translate="no" target="_blank">https://iocaine.madhouse-project.org/</a>, has anyone built a fake <a href="https://fosstodon.org/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> report generator before? Quick search finds <a href="https://github.com/celesteking/dmarcfaker" rel="nofollow noopener" translate="no" target="_blank">https://github.com/celesteking/dmarcfaker</a>, but it does not look like something ready for use. I see some DMARC services already advertise that they filter DMARC reports according to a custom allowlist, so fake DMARC reports must be a thing.

Colin Cogle :verified:<a href="https://infosec.exchange/@a2318" class="u-url mention" rel="nofollow noopener" target="_blank">@a2318</a> I switched back to Postmark. You get one email per week with your domain statistics. There’s an API but I never bothered with it. <a href="https://dmarc.postmarkapp.com/" rel="nofollow noopener" translate="no" target="_blank">https://dmarc.postmarkapp.com/</a> <a href="https://mastodon.colincogle.name/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> <a href="https://mastodon.colincogle.name/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosted</a> <a href="https://mastodon.colincogle.name/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a>

AdamDoes anyone have a recommendations for a service or local solution for processing DMARC reports? I’ve been using ReportURI for many years on an *extremely* low volume email domain (hosted with Google Workspace) and it’s been great to periodically keep track of the DMARC reports to flag any recurring issues and help troubleshooting if needed. However, ReportURI are removing free accounts in February and I’m wondering if it would be worth the paid upgrade or if there are alternative options…I get that the transition package that ReportURI are offering is good value compared to enterprise accounts, but when I say my domain is low volume I really mean it, and I’m not sure I would realise the value of the service. I would be willing to do a bit of monitoring either with a less polished and feature-packed service or even locally. I’d be keen to hear from anyone who has any experience they would be willing to share. <a href="https://infosec.exchange/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a> <a href="https://infosec.exchange/tags/ReportURI" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReportURI</a> <a href="https://infosec.exchange/tags/TechSupport" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechSupport</a> <a href="https://infosec.exchange/tags/googleworkspace" class="mention hashtag" rel="nofollow noopener" target="_blank">#googleworkspace</a>

Stéphane BortzmeyerCours <a href="https://mastodon.gougere.fr/tags/SPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#SPF</a> / <a href="https://mastodon.gougere.fr/tags/DKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#DKIM</a> / <a href="https://mastodon.gougere.fr/tags/DMARC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DMARC</a>. Je leur raconte quoi de joli ?

Recent searches

Search options

Administered by:

Server stats:

#dmarc