Helvede

Jan SchaumannSystem AdministrationWeek 8, The Simple Mail Transfer Protocol, Part IIIIn this video, we look at ways to combat Spam. In the process, we learn about email headers, the Sender Policy Framework (<a href="https://mstdn.social/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a>), DomainKeys Identified Mail (<a href="https://mstdn.social/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a>), and Domain-based Message Authentication, Reporting and Conformance (<a href="https://mstdn.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a>). <a href="https://mstdn.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMTP</a> doesn't seem quite so simple any more...<a href="https://youtu.be/KwCmv3GHGfc" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://youtu.be/KwCmv3GHGfc</a><a href="https://mstdn.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SysAdmin</a> <a href="https://mstdn.social/tags/SRE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SRE</a> <a href="https://mstdn.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevOps</a>

nan0Does anyone has a contact to the Joint Research Centre (<a href="https://chaos.social/tags/JRC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JRC</a>) [0] or My Email Communications Security Assessment (<a href="https://chaos.social/tags/MECSA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MECSA</a>) [1] (both from the <a href="https://chaos.social/tags/EU" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EU</a>)?I find the tool great... if it would parse <a href="https://chaos.social/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a>/#IPv6 correctly und actually check for <a href="https://chaos.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a>...I've tried emailing them, but no response :/Links: [0]: <a href="https://joint-research-centre.ec.europa.eu/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://joint-research-centre.ec.europa.eu/</a> [1]: <a href="https://mecsa.jrc.ec.europa.eu/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mecsa.jrc.ec.europa.eu/</a>

kuijstenI've released an SPF filter for OpenSMTPD: <a class="mention u-url" href="https://netsend.nl/opensmtpd-filter-spf/" rel="nofollow noopener noreferrer" target="_blank">https://netsend.nl/opensmtpd-filter-spf/</a> <a class="mention u-url" href="https://honk.netsend.nl/o/opensmtpd" rel="nofollow noopener noreferrer" target="_blank">#opensmtpd</a> <a class="mention u-url" href="https://honk.netsend.nl/o/milter" rel="nofollow noopener noreferrer" target="_blank">#milter</a> <a class="mention u-url" href="https://honk.netsend.nl/o/spf" rel="nofollow noopener noreferrer" target="_blank">#spf</a>

WulfyI am <a href="https://infosec.exchange/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> a new <a href="https://infosec.exchange/tags/email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#email</a> engine on a new domain. In preparation for a personal <a href="https://infosec.exchange/tags/Googlemail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Googlemail</a> exodus.But even though I have my <a href="https://infosec.exchange/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> and <a href="https://infosec.exchange/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a> record proper <a href="https://infosec.exchange/tags/Gmail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gmail</a> reject the test emails. Without any bounces either, it just black holes them.So over this week, I have a small script that randomly email random emails to Gmail to "build reputation". We will see how that goes.

Peter N. M. HansteenIs SPF Simply Too Hard For Application Developers? The Sender Policy Framework (SPF) is unloved by some, because it conflicts with some long-established SMTP email use cases. But is it also just too hard to understand and to use correctly for application developers? <a href="https://nxdomain.no/~peter/is_spf_too_hard_for_appdevs.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nxdomain.no/~peter/is_spf_too_hard_for_appdevs.html</a> (2016 but still holds) <a href="https://mastodon.social/tags/smtp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#smtp</a> <a href="https://mastodon.social/tags/spf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spf</a> <a href="https://mastodon.social/tags/mail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mail</a> <a href="https://mastodon.social/tags/spam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spam</a> <a href="https://mastodon.social/tags/antispam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#antispam</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/spamd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spamd</a>

circlTR-92 - Unused Domain Names and the Risks of Missing DNS SPF RecordsMany organizations maintain a broad portfolio of domain names, acquired for branding, strategic planning, or defensive purposes. However, a significant portion of these domains often remains unused or lacks proper DNS configurations...Read more <a href="https://www.circl.lu/pub/tr-92/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.circl.lu/pub/tr-92/</a><a href="https://social.circl.lu/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://social.circl.lu/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://social.circl.lu/tags/spf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spf</a> <a href="https://social.circl.lu/tags/domain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#domain</a> <a href="https://social.circl.lu/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> <a href="https://social.circl.lu/tags/scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scam</a> <a href="https://social.circl.lu/tags/netsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#netsec</a>

Stéphane BortzmeyerCours <a href="https://mastodon.gougere.fr/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> / <a href="https://mastodon.gougere.fr/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a> / <a href="https://mastodon.gougere.fr/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a>. Je leur raconte quoi de joli ?

Harald Hannelius :verified:A partner higher ed has a mailing list on <a href="https://mementomori.social/tags/ExchangeOnline" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ExchangeOnline</a> . So their <a href="https://mementomori.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMTP</a> server contacts ours and says "Hello, here's an e-mail from your domain". Our <a href="https://mementomori.social/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> says no thanks (are we actually the only ones blocking based on SPF?). The listserver should rewrite headers and use a return-path address from their domain. The From: header can have our user's emailaddress (think this breaks DKIM though?). Good luck for our partner in fixing this on their end. They probably have to set up a <a href="https://mementomori.social/tags/MTA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MTA</a> and route all outgoing mail through that. Ms won't fix.

Florian BierhoffClaudia Plattner, President of German BSI, has just been featured in an article on email security in eco's dotmagazine. It's a wake up call and invitation to enhance email security in a joined effort :blobs:I like it :ablobsmile:<a href="https://www.dotmagazine.online/issues/digital-security-trust-consumer-protection/enhancing-email-security" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.dotmagazine.online/issues/digital-security-trust-consumer-protection/enhancing-email-security</a><a href="https://infosec.exchange/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> <a href="https://infosec.exchange/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a> <a href="https://infosec.exchange/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a> <a href="https://infosec.exchange/tags/DANE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DANE</a> <a href="https://infosec.exchange/tags/TLSA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLSA</a> <a href="https://infosec.exchange/tags/MTASTS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MTASTS</a> <a href="https://infosec.exchange/tags/TLSRPT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLSRPT</a> <a href="https://infosec.exchange/tags/Mailsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mailsecurity</a> <a href="https://infosec.exchange/tags/TeamBSI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TeamBSI</a> <a href="https://social.bund.de/@bsi" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bsi</a>

Stéphane BortzmeyerLà, on a un champion : un serveur de messagerie qui voit (grâce à <a href="https://mastodon.gougere.fr/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a>) que l'adresse est usurpée et, pour le dire, envoie un message… à l'adresse usurpée.

Florian BierhoffThe Internet Security Days 2024 marked the starting point for a new effort by eco and <a href="https://social.bund.de/@bsi" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bsi</a> to raise adoption of modern email security standards across Germany and worldwide. I'm honored that I was allowed to shape some of the contents of this great event and mailsecurity is finally getting the attention it deserves 💌 :blobcatthx: <a href="https://international.eco.de/news/internet-security-days-2024-it-security-for-email-ai-and-nis2/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://international.eco.de/news/internet-security-days-2024-it-security-for-email-ai-and-nis2/</a><a href="https://infosec.exchange/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a> <a href="https://infosec.exchange/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> <a href="https://infosec.exchange/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a> <a href="https://infosec.exchange/tags/DANE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DANE</a> <a href="https://infosec.exchange/tags/TLSA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLSA</a> <a href="https://infosec.exchange/tags/MTASTS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MTASTS</a> <a href="https://infosec.exchange/tags/TLSRPT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLSRPT</a> <a href="https://infosec.exchange/tags/Mailsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mailsecurity</a> <a href="https://infosec.exchange/tags/TeamBSI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TeamBSI</a>

Afnic🗓️ Formation Sécuriser son courrier électronique grâce au DNS avec DKIM, DMARC, SPF les 10 et 11 octobre ou 5 et 6 décembre 2024.✅ Programme complet et inscriptions sur <a href="https://www.afnic.fr/produits-services/formations/dkim-dmarc-spf-securiser-son-courrier-electronique-grace-au-dns/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.afnic.fr/produits-services/formations/dkim-dmarc-spf-securiser-son-courrier-electronique-grace-au-dns/</a><a href="https://mastodon.social/tags/Formation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Formation</a> <a href="https://mastodon.social/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a> <a href="https://mastodon.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a> <a href="https://mastodon.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://mastodon.social/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a>

Milouse 😺🚀Quelqu’un aurait une explication simple de fonctionnement des règles "a" et "mx" dans une déclaration <a href="https://boitam.eu/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> dans ses <a href="https://boitam.eu/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> ? Est-ce que ça vérifie que le domaine de l’adresse email possède un enregistrement a ou mx qui pointe sur la même IP que le serveur d’envoi de l’email ou "juste" qu’il existe un enregistrement a et mx, quelle que soit l’IP en question? 🤔

Lars Marowsky-Brée 😷Once you correctly configure your own SPF/DKIM setup and switch on reject/quarantine, you get to debug *everyone else's* misconfigured email forwarding or mailing list setup 🥰 Yay?<a href="https://mastodon.online/tags/email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#email</a> <a href="https://mastodon.online/tags/spf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spf</a> <a href="https://mastodon.online/tags/cursed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cursed</a>

Peter N. M. HansteenRFC7505 Means Yes, Your Domain Can Refuse to Handle Mail. Please Leave Us a TXT If You Do. Reprise from 2021, now also trackerless - <a href="https://nxdomain.no/~peter/rfc7505_means_yes_you_can_refuse_to_handle_mail.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nxdomain.no/~peter/rfc7505_means_yes_you_can_refuse_to_handle_mail.html</a> <a href="https://mastodon.social/tags/NULLMX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NULLMX</a> <a href="https://mastodon.social/tags/antispam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#antispam</a> <a href="https://mastodon.social/tags/email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#email</a> # security <a href="https://mastodon.social/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> <a href="https://mastodon.social/tags/spam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spam</a> <a href="https://mastodon.social/tags/RFC7505" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RFC7505</a> <a href="https://mastodon.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMTP</a> (and converting from G's wysiwyg editor droppings is painful fyi)

Aslak RaanesBurde ikke <a href="https://mastodon.social/tags/Vy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vy</a> legge lista litt høyere for vy.no-avsender for kvitteringer o.l.?<a href="https://internet.nl/mail/vy.no/1305185/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://internet.nl/mail/vy.no/1305185/</a><a href="https://mastodon.social/tags/allheimen" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#allheimen</a> <a href="https://mastodon.social/tags/samferdsel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#samferdsel</a> <a href="https://mastodon.social/tags/dkim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dkim</a> <a href="https://mastodon.social/tags/spf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spf</a> <a href="https://mastodon.social/tags/dmarc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dmarc</a> <a href="https://mastodon.social/tags/ipv6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ipv6</a>

Patrick Ben Koetter 🕺🏼Inwiefern ist DMARC und insbesondere sind dessen Report-Formate aggregate und forensic mit den Anforderungen der DSGVO vereinbar? Katharina Küchler (Anwältin, eco Verband) und ich (E-Mail Experte, Leiter Kompetenzgruppe E-Mail eco) sind dieser Frage im vollständig überarbeiteten Rechtsgutachten des <a href="https://troet.cafe/tags/eco" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eco</a> Verbandes nachgegangen.Möge es für alle hier von Nutzen sein!Deutsch: <a href="https://www.eco.de/download/238585/" rel="nofollow noopener noreferrer" target="_blank">https://www.eco.de/download/238585/</a>Englisch: <a href="https://international.eco.de/download/238605" rel="nofollow noopener noreferrer" target="_blank">https://international.eco.de/download/238605</a><a href="https://troet.cafe/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a> <a href="https://troet.cafe/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> <a href="https://troet.cafe/tags/DKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DKIM</a> <a href="https://troet.cafe/tags/email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#email</a> <a href="https://troet.cafe/tags/eco" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eco</a>

Stéphane BortzmeyerSi vous aimez analyser les en-têtes et le code source du courrier électronique, le message de Macron Travail prévenant que vos données ont été piratées est très intéressant.<a href="https://mastodon.gougere.fr/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a> <a href="https://mastodon.gougere.fr/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a> <a href="https://mastodon.gougere.fr/tags/cybers%C3%A9curitay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersécuritay</a>

Jan SchaumannEvery so often, I need to chase down some aspect of email validation (<a href="https://mstdn.social/tags/SPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPF</a>, <a href="https://mstdn.social/tags/DMKIM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMKIM</a>, <a href="https://mstdn.social/tags/DMARC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMARC</a>, ...). This involves a number of <a href="https://mstdn.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> records and queries, but I may forget just which ones. So here's a quick <a href="https://mstdn.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMTP</a>/DNS cheatsheet:

Patrick Ben Koetter 🕺🏼An alle, die mit E-Mail zu tun haben und die es amtlich richtig™ machen wollen: Das <a href="https://social.bund.de/@bsi" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bsi</a> hat die Technische Richtlinie BSI TR-03182 „Email Authentication“ <a href="https://bsi.bund.de/dok/tr-03182-en" rel="nofollow noopener noreferrer" target="_blank">https://bsi.bund.de/dok/tr-03182-en</a> veröffentlicht, welche beschreibt wie <a href="https://troet.cafe/tags/spf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spf</a>, <a href="https://troet.cafe/tags/dkim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dkim</a> und <a href="https://troet.cafe/tags/dmarc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dmarc</a> eingesetzt werden müssen, damit sie konform mit der TR sind und einen Audit für eine BSI-Zertifizierung bestehen können.Weshalb ich das schreibe? Ihr lest den troet des stolzen Autors, der 1,5 Jahre mit dem BSI an der TR getüftelt hat.

Recent searches

Search options

Administered by:

Server stats:

#spf