[166688] in North American Network Operators' Group
Re: Email Server and DNS
daemon@ATHENA.MIT.EDU (John Levine)
Sun Nov 3 23:11:46 2013
Date: 4 Nov 2013 04:11:09 -0000
From: "John Levine" <johnl@iecc.com>
To: nanog@nanog.org
In-Reply-To: <52767E9C.8010805@snovc.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
>MX, PTR, and SPF are really all you need.
So far so good, noting that a host name that doesn't look generic is
better than one that does.
> I would recommend you go a
>step further and use DKIM, ADSP, and DMARC.
Using DKIM is a good idea. Do *not* use ADSP. It is a failed
experiment which will provide no benefit and considerable pain.
(Check the author list on RFC 5617 before arguing, please.)
If you believe that your domain is heavily forged (which if you are
not Paypal, Facebook, or a large bank or ISP, it almost certainly is
not), you can set up a DMARC record to collect some statistics about
what mail other people are getting that appears to be from you. Do
not try to use DMARC to tell people to quarantine or reject your mail
until you are really sure you understand the statistics you're
getting.
R's,
John
