And the long awaited How To #SPF #DMARC #DKIM blog entry is now posted at https://jan.wildeboer.net/2022/09/Email-3-TheRest/ As always, replies to this too will show up as comment on my blog! Sorry, Twitter friends, #Mastodon only feature.
Jan Wildeboer's Blog
Jan Wildeboer
0. The Journey - The basics and outlook (on the series, not the Microsoft mail client ;) 1. Postfix - the in and out, so to say. The robust, battle-hardened connection point for other mail servers on the internet to send emails to and receive emails from your domain(s). Also known as the MTA, the Mail Transfer Agent. 2. Dovecot - where you and your users talk to to get emails to their mail client, be it your smartphone, a mail client on your computer or just even the command line. It’s the IMAP server. 3. DKIM/DMARC/SPF - Just having postfix and dovecot up and running isn’t enough. We will also look at user authentication, letsencrypt certificates, DKIM, DMARC, SPF and the daily checks to make sure everything is humming along nicely. 4. The final stuff - How to make sure my e-mail server is happy and can do its job. Some simple checks, how to use fail2ban to keep bad servers and users away, checking log files, all those little things.
⁂
More from
Jan Wildeboer 😷:krulorange:
@jwildeboer first of all, great article, enjoyed reading this. Regarding the opendkim `KeyTable` part of the setup, i have a small question: did you mean *signing* instead of *verifying* there? As verification should happen on the receiving side using sender's public key