22 - Synology Mail Server, protocols & Email Deliverability with SPF,DKIM,DMARC,with Sophos (How to)
Presentation :
https://public.jardon.ch:8081/d/s/606...
User : youtube
PW : youtube
NOTES at the end (added to the PDF in link)
Hello everyone,
This video to precise some things I have explained in other videos about emails, and some concerns about mail security and deliverability.
I m also talking about some of the protocols with their advantages and drawbacks and how to help detect and protect against domain spoofing in emails with authentication techniques like SPF, DKIM and DMARC for better domain reputation and better mail delivery.
Also a little example with S/MIME.
In addition, as requested by a viewer, I am presenting my mail architecture and configuration, which is an hybrid setup. The configuration is shown with printscreens and all is explained
After some tests, I was able to receive direct SMTP connections from other SMTP servers, but I still can't send as my ISP is blocking the TCP 25 port, but that is not important as i can use my mail provider as an authenticated relay.
This should probably be a in a follow up video.
NOTES :
The "i=" tag in DKIM is the identity of the user on behalf of which this message is signed.
The default, if not specified, is an empty local-part followed by an "@" followed by the domain from the "d=" tag). The domain part of the address (in the "i=" tag) MUST be the same as, or a subdomain of, the value of the "d=" tag.
Specifying RUA will make receivers send you a DMARC aggregate report, depending on RI parameter value. May be limited by receiver to once a day.
Specifying RUF will make receivers notify you of a DMARC failure, depending on the FO parameter value.