Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add note on working MX, FCrDNS and SPF+DKIM+DMARC to documentation #1228

Closed
baknu opened this issue Jan 16, 2024 · 1 comment · Fixed by #1298, #1467 or #1555
Closed

Add note on working MX, FCrDNS and SPF+DKIM+DMARC to documentation #1228

baknu opened this issue Jan 16, 2024 · 1 comment · Fixed by #1298, #1467 or #1555
Assignees
Labels
documentation documentation
Milestone

Comments

@baknu
Copy link
Contributor

baknu commented Jan 16, 2024

Some inbound mail servers may check whether an SMTP EHLO domain has (1) a working MX and (2) FCrDNS. So, for the mail test it is important that the EHLO domain that is used by the Internet.nl test suite has both in place.

For the EHLO domain setting see:

SMTP_EHLO_DOMAIN = getenv("SMTP_EHLO_DOMAIN", "internet.nl") # MUST be ASCII; A-label for IDNs (i.e., xn--)

And see:
SMTP_EHLO_DOMAIN=$INTERNETNL_DOMAINNAME

Is it indeed correct that e.g. batch.internet.nl is using batch.internet.nl as the EHLO domain?

Furthermore, SPF+DKIM+DMARC should be configured. In case a domain is used for the Internet.nl test suite that has no regular outbound mail the following records should be used.

internet.nl		IN TXT	"v=spf1 a -all"	; The "a" mechanism is needed for the mail test (see rfc7208, section-2.3).
_domainkey.internet.nl	IN TXT	"v=DKIM1; p="	; empty DKIM to score 100% for this non-sending subdomain that does have SPF "a" mechanism which is needed for mail test.
_dmarc.internet.nl	IN TXT	"v=DMARC1; p=reject; sp=reject;"

The right place in the documentation to cover this seems to be: https://github.com/internetstandards/Internet.nl/blob/main/documentation/Docker-deployment.md#dns-setup

@baknu baknu added the documentation documentation label Jan 16, 2024
@baknu baknu added this to the v1.9 milestone Jan 16, 2024
@mxsasha
Copy link
Collaborator

mxsasha commented Feb 28, 2024

Is it indeed correct that e.g. batch.internet.nl is using batch.internet.nl as the EHLO domain?

RFC821 says "host name of the sender-SMTP", so that would suggest yes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment