Bii o ṣe le Ṣeto Ijeri Imeeli Rẹ Ṣeto Titọ (DKIM, DMARC, SPF)

DKIM Validator DMRC SPF

Ti o ba nfi imeeli ranṣẹ ni eyikeyi iru iwọn didun, o jẹ ile-iṣẹ kan nibiti o ti ro pe o jẹbi ati pe o ni lati jẹrisi aimọkan rẹ. A n ṣiṣẹ pẹlu ọpọlọpọ awọn ile-iṣẹ ti n ṣe iranlọwọ fun wọn pẹlu iṣiwa imeeli wọn, imorusi IP, ati awọn ọran ifijiṣẹ. Pupọ awọn ile-iṣẹ ko paapaa mọ pe wọn ni iṣoro rara.

Awọn iṣoro ti a ko ri ti Ifijiṣẹ

Awọn iṣoro alaihan mẹta wa pẹlu ifijiṣẹ imeeli ti awọn iṣowo ko mọ:

  1. fun aiye - Awọn olupese iṣẹ imeeli (ESP) ṣakoso awọn igbanilaaye ijade… ṣugbọn olupese iṣẹ intanẹẹti (ISP) ṣakoso ẹnu-ọna fun adirẹsi imeeli ti nlo. O ni gan a ẹru eto. O le ṣe ohun gbogbo ni ẹtọ bi iṣowo lati gba igbanilaaye ati awọn adirẹsi imeeli, ati pe ISP ko ni imọran ati pe o le di ọ lọnakọna.
  2. Ifiweranṣẹ Apo-iwọle - Awọn ESP ṣe igbega giga igbala awọn ošuwọn ti o wa ni ipilẹ ọrọ isọkusọ. Imeeli ti o jẹ jiṣẹ taara si folda ijekuje ti ko si rii nipasẹ alabapin imeeli rẹ ti jẹ jiṣẹ ni imọ-ẹrọ. Ni ibere lati iwongba ti bojuto rẹ ifibọ apo-iwọle, o ni lati lo akojọ awọn irugbin ki o lọ wo ISP kọọkan. Awọn iṣẹ wa ti o ṣe eyi.
  3. Atunṣe - Awọn ISPs ati awọn iṣẹ ẹni-kẹta tun ṣetọju awọn ikun olokiki fun fifiranṣẹ adirẹsi IP fun imeeli rẹ. Awọn akojọ dudu wa ti awọn ISP le lo lati dènà gbogbo imeeli rẹ lapapọ, tabi o le ni orukọ ti ko dara ti yoo jẹ ki o lọ si folda ijekuje. Awọn iṣẹ nọmba kan lo wa ti o le lo lati ṣe atẹle orukọ IP rẹ… ṣugbọn Emi yoo jẹ ireti diẹ nitori ọpọlọpọ ko ni oye gangan si awọn algoridimu ISP kọọkan.

Imeeli Ijeri

Awọn iṣe ti o dara julọ fun idinku eyikeyi awọn ọran gbigbe apo-iwọle ni lati rii daju pe o ti ṣeto nọmba kan ti awọn igbasilẹ DNS ti awọn ISPs le lo lati wo ati rii daju pe awọn apamọ ti o nfiranṣẹ ni otitọ ti firanṣẹ nipasẹ rẹ kii ṣe nipasẹ ẹnikan ti o dibọn pe o jẹ ile-iṣẹ rẹ. . Eyi ni a ṣe nipasẹ nọmba kan ti awọn ajohunše:

  • Ilana Ilana Olu (SPF) - boṣewa Atijọ julọ ni ayika, eyi ni ibiti o forukọsilẹ igbasilẹ TXT lori iforukọsilẹ agbegbe rẹ (DNS) ti o sọ kini awọn ibugbe tabi adirẹsi IP ti o nfi imeeli ranṣẹ lati ile-iṣẹ rẹ. Fun apẹẹrẹ, Mo fi imeeli ranṣẹ fun Martech Zone lati Aaye iṣẹ Google ati lati CircuPress (ESP ti ara mi lọwọlọwọ ni beta). Mo ni ohun itanna SMTP lori oju opo wẹẹbu mi lati tun firanṣẹ nipasẹ Google, bibẹẹkọ Emi yoo ni adiresi IP ti o wa pẹlu eyi daradara.

v=spf1 include:circupressmail.com include:_spf.google.com ~all

  • -ašẹ-orisun Ifiranṣẹ Ijeri, Iroyin ati Conformance (DMARC) – boṣewa tuntun yii ni bọtini fifi ẹnọ kọ nkan ninu rẹ ti o le fọwọsi aaye agbegbe mi ati olufiranṣẹ. Bọtini kọọkan ni a ṣejade nipasẹ olufiranṣẹ mi, ni idaniloju pe awọn imeeli ti a fi ranṣẹ nipasẹ spammer ko le gba spoofed. Ti o ba nlo Google Workspace, eyi ni Bii o ṣe le ṣeto DMARC.
  • DomainKeys Idanimọ Mail (DKIM) - Nṣiṣẹ lẹgbẹẹ igbasilẹ DMRC, igbasilẹ yii sọ fun awọn ISPs bi o ṣe le ṣe itọju DMRC ati awọn ofin SPF mi bakannaa ibiti o ti le fi awọn ijabọ ifijiṣẹ eyikeyi ranṣẹ. Mo fẹ ki awọn ISP kọ awọn ifiranṣẹ eyikeyi ti ko kọja DKIM tabi SPF, ati pe Mo fẹ ki wọn fi awọn ijabọ ranṣẹ si adirẹsi imeeli yẹn.

v=DMARC1; p=reject; rua=mailto:dmarc@martech.zone; adkim=r; aspf=s;

  • Awọn Atọka Brand fun Idanimọ Ifiranṣẹ (BIMI) - afikun tuntun tuntun, BIMI n pese ọna fun awọn ISPs ati awọn ohun elo imeeli wọn lati ṣe afihan aami ami iyasọtọ laarin alabara imeeli. Iwọnwọn ṣiṣi mejeeji wa bi daradara bi ẹya ìpàrokò bošewa fun Gmail nibi ti o tun nilo ijẹrisi ti paroko. Awọn iwe-ẹri jẹ gbowolori lẹwa nitorina Emi ko ṣe iyẹn sibẹsibẹ.

v=BIMI1; l=https://martech.zone/logo.svg;a=self;

AKIYESI: Ti o ba nilo iranlọwọ lori siseto eyikeyi ti ijẹrisi imeeli rẹ, ma ṣe ṣiyemeji lati kan si ile-iṣẹ mi Highbridge. A ni egbe kan ti tita imeeli ati awọn amoye ifijiṣẹ ti o le ṣe iranlọwọ.

Bii o ṣe le jẹrisi Ijeri Imeeli Rẹ

Gbogbo alaye orisun, alaye yiyi, ati alaye afọwọsi ti o ni nkan ṣe pẹlu gbogbo imeeli ni a rii laarin awọn akọle ifiranṣẹ. Ti o ba jẹ onimọran ifijiṣẹ, itumọ iwọnyi rọrun pupọ… ṣugbọn ti o ba jẹ alakobere, wọn nira iyalẹnu. Eyi ni ohun ti akọsori ifiranṣẹ dabi fun iwe iroyin wa, Mo ti yọ diẹ ninu awọn imeeli ti idahun adaṣe ati alaye ipolongo:

Akọsori ifiranṣẹ - DKIM ati SPF

Ti o ba ka nipasẹ, o le rii kini awọn ofin DKIM mi jẹ, boya DMRC kọja (ko ṣe) ati pe SPF kọja… ṣugbọn iyẹn jẹ ọpọlọpọ iṣẹ. Iṣeduro ti o dara julọ wa, botilẹjẹpe, ati pe iyẹn ni lati lo DKIMValidator. DKIMValidator n pese adirẹsi imeeli fun ọ ti o le ṣafikun si atokọ iwe iroyin rẹ tabi firanṣẹ nipasẹ imeeli ọfiisi rẹ… ati pe wọn tumọ alaye akọsori sinu ijabọ to dara:

Ni akọkọ, o fọwọsi fifi ẹnọ kọ nkan DMRC mi ati ibuwọlu DKIM lati rii boya o kọja tabi rara (ko ṣe).

DKIM Information:
DKIM Signature

Message contains this DKIM Signature:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=circupressmail.com;
	s=cpmail; t=1643110423;
	bh=PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=;
	h=Date:To:From:Reply-to:Subject:List-Unsubscribe;
	b=HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=


Signature Information:
v= Version:         1
a= Algorithm:       rsa-sha256
c= Method:          relaxed/relaxed
d= Domain:          circupressmail.com
s= Selector:        cpmail
q= Protocol:        
bh=                 PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=
h= Signed Headers:  Date:To:From:Reply-to:Subject:List-Unsubscribe
b= Data:            HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=
Public Key DNS Lookup

Building DNS Query for cpmail._domainkey.circupressmail.com
Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+D53OskK3EM/9R9TrX0l67Us4wBiErHungTAEu7DEQCz7YlWSDA+zrMGumErsBac70ObfdsCaMspmSco82MZmoXEf9kPmlNiqw99Q6tknblJnY3mpUBxFkEX6l0O8/+1qZSM2d/VJ8nQvCDUNEs/hJEGyta/ps5655ElohkbiawIDAQAB
Validating Signature

result = fail
Details: body has been altered

Lẹhinna, o wo igbasilẹ SPF mi lati rii boya o kọja (o ṣe):

SPF Information:
Using this information that I obtained from the headers

Helo Address = us1.circupressmail.com
From Address = info@martech.zone
From IP      = 74.207.235.122
SPF Record Lookup

Looking up TXT SPF record for martech.zone
Found the following namesevers for martech.zone: ns57.domaincontrol.com ns58.domaincontrol.com
Retrieved this SPF Record: zone updated 20210630 (TTL = 600)
using authoritative server (ns57.domaincontrol.com) directly for SPF Check
Result: pass (Mechanism 'include:circupressmail.com' matched)

Result code: pass
Local Explanation: martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)
spf_header = Received-SPF: pass (martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)) receiver=ip-172-31-60-105.ec2.internal; identity=mailfrom; envelope-from="info@martech.zone"; helo=us1.circupressmail.com; client-ip=74.207.235.122

Ati nikẹhin, o fun mi ni oye lori ifiranṣẹ funrararẹ ati boya akoonu le ṣe afihan diẹ ninu awọn irinṣẹ wiwa SPAM, ṣayẹwo lati rii boya Mo wa lori awọn atokọ dudu, o sọ fun mi boya tabi rara o gba ọ niyanju lati firanṣẹ si folda ijekuje:

SpamAssassin Score: -4.787
Message is NOT marked as spam
Points breakdown: 
-5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                            high trust
                            [74.207.235.122 listed in list.dnswl.org]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                            identical to background
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                            Colors in HTML
 0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid

Rii daju lati ṣe idanwo gbogbo ESP tabi iṣẹ fifiranṣẹ ẹnikẹta ti ile-iṣẹ rẹ nfi imeeli ranṣẹ lati rii daju pe Ijeri Imeeli rẹ ti ṣeto daradara!

Ṣe idanwo Imeeli Rẹ Pẹlu DKIM Validator

Ifihan: Mo n lo ọna asopọ alafaramo mi fun Aaye iṣẹ Google ni nkan yii.