Security/Domain: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
Line 28: Line 28:


==DNS » Record » TXT » SPF==
==DNS » Record » TXT » SPF==
# Run a Composite Check:
#* [https://dmarcian.com/domain-checker/ DMARCian » Domain Checker]
#* [https://easydmarc.com/tools/email-security-check EasyDMARC » Email Security  Check]
# Use SPF Flattening
#* [https://easydmarc.com/tools/spf-flattening EasyDMARC » SPF Flattening]
# Manually
#*; Check for:
#*: Proper -all ending
#*: Lookup count ≤ 10
#*: No multiple TXT records
#*: Only needed services included


==DNS » Record » TXT » DKIM==
==DNS » Record » TXT » DKIM==

Revision as of 07:47, 30 May 2025

Tools » Install » SPF

cat <<'EXE'| sudo bash
echo && git clone https://github.com/jsarenik/spf-tools.git /opt/cli/spf-tools
echo && cd /opt/cli/spf-tools/
./despf.sh -h
EXE

cat <<'CFG'| tee ${HOME}/.spf-toolsrc >/dev/null
DOMAIN=shahed.biz
ORIG_SPF=spf.shahed.biz
DESPF_SKIP_DOMAINS=_spf.google.com:_spf.sendgrid.net
DNS_TIMEOUT=5
DNS_SERVER=1.1.1.1
CFG

Tools » Install » DKIM

cat <<'EXE'| sudo bash
apt-get update;echo
apt list -a --upgradable;echo
apt-get install -y opendkim-tools;echo;apt-get clean
EXE

DNS » Record » TXT » SPF

  1. Run a Composite Check:
  2. Use SPF Flattening
  3. Manually
    • Check for
      Proper -all ending
      Lookup count ≤ 10
      No multiple TXT records
      Only needed services included

DNS » Record » TXT » DKIM

Playground

dig MX  chorke.org
dig TXT chorke.org
openssl s_client -connect mail.chorke.org:25
apt info   opendkim-tools
apt search opendkim-tools
sudo apt-get install -y opendkim-tools
sudo git clone https://github.com/jsarenik/spf-tools.git \
   /opt/cli/spf-tools
cd /opt/cli/spf-tools/

References