How to enable SPF (or similar) on my domain - Page 2

ewal · 2 Apr 2016, 09:38 PM

Thanks

I sent another test mail and only got 3 criticals but as the report is only basic I can't see the full details. I tried various other testers and none come back with errors (perhaps they are not so strict?).

I'm now getting DMARC reports and have switched RUA to DMARC Analyzer. Hopefully will get some good volume, but likely that I will implement SPF/DKIM and DMARC on my main domain to get more reporting volume.

Cheers
Edward

unlocktheinbox · 2 Apr 2016, 10:16 PM

I just looked at your latest results, you're good. Just the SSL Host Name mismatches, which is out of your control.

When you get a chance you should set up blacklist monitoring.

gardenweed · 5 Apr 2016, 06:48 AM

I recently tried adding DMARC records to my domain.
The domain says they are synced.

But the unlocktheinbox mail test report says DMARC record not found.
The test seems to pass the SPF and DKIM record tests.

How do I troubleshoot this?

unlocktheinbox · 5 Apr 2016, 07:39 AM

PM the email address you tested with and I'll take a look.

unlocktheinbox · 6 Apr 2016, 12:47 AM

Quote:

I recently tried adding DMARC records to my domain.
The domain says they are synced.

But the unlocktheinbox mail test report says DMARC record not found.
The test seems to pass the SPF and DKIM record tests.

How do I troubleshoot this?

Yes, you added a DMARC record - but it contains your SPF record syntax - Not DMARC Syntax

You can use this wizard to create your record: DMARC Wizard

ewal · 6 Apr 2016, 03:01 AM

So, I now have 3 domains with SPF/DKIM/DMARC records all set up correctly (thanks all for the tremendous help).

Does anyone know where I can send spoof messages from to further test things?

Sending from another Fastmail user account does not work as Fastmail uses generic SPF and DKIM records so anything sent from Fastmail servers (messagingengine.com) will pass regardless of spoofing.

unlocktheinbox · 6 Apr 2016, 03:11 AM

Quote:

Does anyone know where I can send spoof messages from to further test things?

You should be able to do it command line.

Just telnet to any mail server on any machine with port 25 open

PHP Code:


			
telenet mail.example.com 25
HELO example.com
MAIL FROM: <FakeEmail@yourdomain.com>
RCPT TO: validuser@somedomain.com
DATA
.
yadda yadda.

Or you can do it the easy way and use this tool..

https://www.wormly.com/test_smtp_server

gardenweed · 6 Apr 2016, 08:37 AM

Quote:

Originally Posted by unlocktheinbox

Yes, you added a DMARC record - but it contains your SPF record syntax - Not DMARC Syntax

...

I'm not sure what you mean.
I used the DMARC wizard. The records entered and synced are as follows:

Quote:

Type: TXT
Host: _dmarc.mydomain.com
Data: v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mydomain.com; ruf=mailto:dmarc@mydomain.com; rf=afrf; pct=100; ri=86400

Is this the correct format?

unlocktheinbox · 6 Apr 2016, 10:46 PM

It's the correct format, but that's not what's showing up in DNS.

Go here:

https://www.unlocktheinbox.com/dnstools/spf/

Then type in

_dmarc.YourDomain.com.au

Press Search.

And you'll see that your SPF record comes up and not the DMARC record you listed.

gardenweed · 7 Apr 2016, 07:32 AM

Quote:

Originally Posted by unlocktheinbox

It's the correct format, but that's not what's showing up in DNS.

Go here:

https://www.unlocktheinbox.com/dnstools/spf/

Then type in

_dmarc.YourDomain.com.au

Press Search.

And you'll see that your SPF record comes up and not the DMARC record you listed.

Thanks.
All fixed - I think.
I had the DNS record set back at my domain provider. I needed to set the records in the Fastmail domain settings.

2 Apr 2016, 09:38 PM	#16
ewal Master of the @ Join Date: Apr 2002 Location: West Sussex, UK Posts: 1,334	Thanks I sent another test mail and only got 3 criticals but as the report is only basic I can't see the full details. I tried various other testers and none come back with errors (perhaps they are not so strict?). I'm now getting DMARC reports and have switched RUA to DMARC Analyzer. Hopefully will get some good volume, but likely that I will implement SPF/DKIM and DMARC on my main domain to get more reporting volume. Cheers Edward

2 Apr 2016, 10:16 PM	#17
unlocktheinbox Member Join Date: Feb 2016 Posts: 47	I just looked at your latest results, you're good. Just the SSL Host Name mismatches, which is out of your control. When you get a chance you should set up blacklist monitoring.

5 Apr 2016, 06:48 AM	#18
gardenweed Cornerstone of the Community Join Date: Jun 2008 Location: Perth Posts: 664	I recently tried adding DMARC records to my domain. The domain says they are synced. But the unlocktheinbox mail test report says DMARC record not found. The test seems to pass the SPF and DKIM record tests. How do I troubleshoot this?

5 Apr 2016, 07:39 AM	#19
unlocktheinbox Member Join Date: Feb 2016 Posts: 47	PM the email address you tested with and I'll take a look.

6 Apr 2016, 03:01 AM	#21
ewal Master of the @ Join Date: Apr 2002 Location: West Sussex, UK Posts: 1,334	So, I now have 3 domains with SPF/DKIM/DMARC records all set up correctly (thanks all for the tremendous help). Does anyone know where I can send spoof messages from to further test things? Sending from another Fastmail user account does not work as Fastmail uses generic SPF and DKIM records so anything sent from Fastmail servers (messagingengine.com) will pass regardless of spoofing.

6 Apr 2016, 10:46 PM	#24
unlocktheinbox Member Join Date: Feb 2016 Posts: 47	It's the correct format, but that's not what's showing up in DNS. Go here: https://www.unlocktheinbox.com/dnstools/spf/ Then type in _dmarc.YourDomain.com.au Press Search. And you'll see that your SPF record comes up and not the DMARC record you listed.