SPF - defined 2003
DKIM - defined 2004
DMARC - defined 2012
Some mailserver admins still today: can you stop adding new stuff, we need more time to implement it. Don't rush us!
Le sigh.
0 Boosts
0 Likes
@jwildeboer "just one more lane will fix the traffic" vibes :)
@vadim 23 year old lanes you could use but you still take that old road that people stopped using and now you blame them for the way things are for you ;)
@jwildeboer it a shame we don't have a decent replacement for this entirely, like a railroad or something
I'm old school myself. My mailserver is basic dovecot and postfix. Proudly configured via ssh and config files in vi. If you're like that and want to know how to add SPF/DKIM/DMARC, I wrote it down for you at https://jan.wildeboer.net/2022/09/Email-3-TheRest/
Jan Wildeboer's Blog
Jan Wildeboer
0. The Journey - The basics and outlook (on the series, not the Microsoft mail client ;) 1. Postfix - the in and out, so to say. The robust, battle-hardened connection point for other mail servers on the internet to send emails to and receive emails from your domain(s). Also known as the MTA, the Mail Transfer Agent. 2. Dovecot - where you and your users talk to to get emails to their mail client, be it your smartphone, a mail client on your computer or just even the command line. It’s the IMAP server. 3. DKIM/DMARC/SPF - Just having postfix and dovecot up and running isn’t enough. We will also look at user authentication, letsencrypt certificates, DKIM, DMARC, SPF and the daily checks to make sure everything is humming along nicely. 4. The final stuff - How to make sure my e-mail server is happy and can do its job. Some simple checks, how to use fail2ban to keep bad servers and users away, checking log files, all those little things.
⁂
More from
Jan Wildeboer 😷:krulorange:
@jwildeboer hey I committed the same !
Dovecot + Postfix + Fail2ban
With virtual users and virtual domain... All via SSH
https://blog.sbw.be/scips/2026/debian-13-postfix-3-10-x-dovecot-2-4-x/554/
@jwildeboer I will recheck my dkim and dmarc...
Any success with spam assassin? Some rules to share?
@scips I don't use SpamAssassin, sorry!
@jwildeboer Wait until you have that #IPv6 discussion with them.
@tubsta I don't 😊 My mailserver does SPF, DMARC, DKIM and happily talks both IPv4 and IPv6. Since 15 years. I am not the problem ;)
@jwildeboer I met someone that was proudly claiming that his email server wasn't supporting IPv6 nor DNSSEC and was proud if it. To him, both IPv6 and DNSSEC should not exist and the same went for DMARC and DKIM.
Said guy was also complaining that his emails always ended up filtered out by others as spam... Some people just want to stay in their world
@jwildeboer POP3 before SMTP, because SMTP auth is bad!
@jwildeboer Offen gesagt habe ich mich auch erst letztes Jahr darüber kümmert für meinen privaten Mail-Server. Ich glaube, Google ließ mir das nicht mehr durchgehen.