Recent searches

No recent searches

Search options

Only available when logged in.
eupolicy.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
This Mastodon server is a friendly and respectful discussion space for people working in areas related to EU policy. When you request to create an account, please tell us something about you.

Administered by:

Server stats:

205
active users

eupolicy.social: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.1

#dmarc

0 posts0 participants0 posts today
Replied in thread
TheTomas

@HonkHase @bsi

Wie viele haben Ihre Emails längst aus der Hand gegeben, an einen Anbieter der SPF, DKIM und DMARC einfach so stillschweigend mit proprietären Features wie DirectSend aushebelt und sich um Standards und Authentifizierung einen Dreck schert? Dessen Email Clients im Jahr 2025 noch immer kein WebDAV können?

#Email #Microsoft #DMARC #DirectSend #Fail

borncity.com/blog/2025/07/31/e

Borns IT- und Windows-Blog · Exchange Online: Umgeht E-Mail-Gateway und stellt gespoofte Mails zuIch stelle mal eine Leserbeobachtung zu Exchange Online hier im Blog ein. Exchange Online liefert beim Leser gespoofte E-Mails zu, obwohl ein E-Mail-Gateway verwendet wird. E-Mail-Spoofing ist eine…
*
Feoh

@jimsalter @dashdsrdash and anyone else who might know.

A while back I created the necessary DKIM/DMARC (I think) DNS records to keep DNS from dropping email to my custom domain on the floor.

But now I get a ton of automated seeming DMARC emails.

I've never seen a bad report in any of them, so I'll admit to having stopped looking. It's not like most modern email clients can cope with the .tar.gz contents anyway (Yes I know, read mail with mutt, and I do, but I also use the web UI because I'm a lazy cretin :).

Is there a way to make these actually useful? Should I maybe just change the records to send to a + variant of my address so I can filter them into a folder and ignore them like I'm doing now but with extra clutter? :)

Thanks

#email#dmarc#dkim
Jonathan Kamens 86 47

#tfw You have to email a government agency, explain in excruciating detail why your mail server (and any other that enforces #DMARC) can't receive certain emails they're sending that fail their DMARC policy, and then cross your fingers and pray that the tier 1 customer service rep who reads your email forwards it to someone who can fix the problem AND said someone actually takes the time to do it. *sigh*
#smtp #SysAdmin #MailAdmin

Jonathan Kamens 86 47

#tfw you have multiple interviews for an #infosec leadership position at a company, and the hiring manager ends up telling you they really wanted to hire you but couldn't convince the executive team to put the money in the budget, and then months later they add you to their marketing list, and then your #DMARC deployment tries to send them an aggregate report, and it bounces because their RUA inbox is broken, thus proving that they really should have hired you to clean up shit like that.

*
Florian Bierhoff

Die kürzlich veröffentlichte Cyber-Sicherheitsempfehlung "Upgrade für die E-Mail-Sicherheit" ist ein Paradebeispiel für die lösungsorientierte Zusammenarbeit zwischen verschiedenen Abteilungen im BSI. Nur so konnten wir praxisnahe Empfehlungen aussprechen, die auf Beobachtungen der echten Welt da draußen beruhen. Oft können Unternehmen, die E-Mails über eine eigene Domain senden und empfangen, nämlich schon mit überschaubaren Aufwand ihre Sicherheit deutlich verbessern.

bsi.bund.de/DE/Service-Navi/Pr

Bundesamt für Sicherheit in der InformationstechnikBSI veröffentlicht Empfehlungen zur Verbesserung der E-Mail-Sicherheit in UnternehmenDas BSI hat eine Cyber-Sicherheitsempfehlung "Upgrade für die E-Mail-Sicherheit" veröffentlicht. Diese richtet sich an alle Unternehmen, die E-Mails mit einer eigenen Domain senden und empfangen.
#MailSecurity#TeamBSI#SPF
*
Jonathan Kamens 86 47

I've ranted before about #DMARC and whether it's worth private mail-server admins implementing.
Today's rant: the reference implementation, github.com/trusteddomainprojec, has been abandoned for ~4 years, and its maintainers, trusteddomain.org/, are completely AWOL.
Linux distro maintainers have had to do proxy maintenance themselves, picking and choosing patches from pull requests submitted to the project to add to their distributions.
This sucks.
#FOSS #SMTP #OpenDMARC #TrustedDomainProject

GitHubGitHub - trusteddomainproject/OpenDMARC: This is the Trusted Domain Project's impementation of the DMARC protocol libary and mail filter, called OpenDMARC. A "milter" connects to unix-based mailers (originally, sendmail, but now many) and provides a standard filtering API.This is the Trusted Domain Project's impementation of the DMARC protocol libary and mail filter, called OpenDMARC. A "milter" connects to unix-based mailers (originally, sendmail, bu...
Replied in thread
John Goerzen

@jeremiah_ @elb #NNCPNET, the new #NNCP-based email network, now has a bidirectional, opt-in, Internet #email bridge! salsa.debian.org/jgoerzen/dock

This gates Internet email to/from NNCP. The bridge is off by default. It is a full participant in #SPF, #DKIM, #DMARC, and #TLS in both directions.

Yes, now you can get Internet email straight to your #RaspberryPi ! (And even without this, your Pis can email each other!)

GitLabIntroduction to the Internet Bridge · Wiki · John Goerzen / Docker container for email over NNCP · GitLabDebian Salsa Gitlab
Replied in thread
Jan Schaumann

System Administration

Week 8, The Simple Mail Transfer Protocol, Part III

In this video, we look at ways to combat Spam. In the process, we learn about email headers, the Sender Policy Framework (#SPF), DomainKeys Identified Mail (#DKIM), and Domain-based Message Authentication, Reporting and Conformance (#DMARC). #SMTP doesn't seem quite so simple any more...

youtu.be/KwCmv3GHGfc

youtu.be- YouTubeEnjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
#SysAdmin#SRE#DevOps
Hans van Zijst
I just found out that Dovecot 2.4 is a crippled version of Dovecot 2.3: no more clustering support, the director function has been removed. If you want to do clustering now, you'll have to buy a Pro license.

https://doc.dovecot.org/2.4.0/installation/upgrade/2.3-to-2.4.html#removed-features

So, although I've used Dovecot for years, both private and for work, it seems like this is the end of the line for me.

At the same time I see what @Stalwart Labs can do. Yes, clustering, for one. And a whole lot more, including bayesian classification, analysis of DMARC reports and even a reputation database.

I'm really impressed by what it can do. Bit hesitant about the fact that it's still only version 0.11.5 though, smells alpha...

Looks like Stalwart is the future for me.

https://stalw.art/docs/cluster/overview

#Dovecot #Stalwart #E-mail #DMARC
doc.dovecot.org2.3 to 2.4 | Dovecot CEDovecot CE Documentation
#email#dmarc
towo

dmarc-subject = %x52.65.70.6f.72.74 1*FWS %x44.6f.6d.61.69.6e.3a 1*FWS domain-name 1*FWS %x53.75.62.6d.69.74.74.65.72.3a 1*FWS domain-name 1*FWS %x52.65.70.6f.72.74.2d.49.44.3a msg-id

Yes, it allows newlines. Tough luck, @towo. No, Google, the D is a capital letter. No, Microsoft, don't fucking put a '[Preview]' in front.

#dmarc#sysadmin#mail
TrendingLive feeds
About