On Sun, Apr 23, 2023 at 9:33 PM Roland Miyamoto via Mailman-users < mailman-users@mailman3.org> wrote:
Hi Stephen.
On 23/04/2023 19:16, Stephen Daniel wrote:
Most of this means very little to me. Is there somewhere I can go to read about these DNS records?
SPF and DMARC records
are fairly easy to set up.
DKIM is more difficult
There is nothing difficult with it. There are online tools that you can use to generate those keys. Those tools also guide you on what records you need to publish on DNS. Go to https://easydmarc.com/tools, the point to "Platform". You will get tools to generate the records/keys and tools to check the records once you've published them and configured your MTA.
https://tecadmin.net/setup-dkim-with-postfix-on-ubuntu-debian https://easydmarc.com/blog/how-to-configure-dkim-opendkim-with-postfix
because you have to generate a private/public key pair, publish the public one in a DNS TXT record for YYYYMM._domainkey.fullyqualified.domainname.tld and then teach your Mail Service (say postfix) how to sign each message that it sends out with the private key which is secretly stored on your server.
Correctly configuring the MTA is the difficult part. However, the documentation is already shown in those two links.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]