Nhazi SPF, DKIM na DMARC

Ntuziaka a ga-egosi gị usoro nhazi SPF, DKIM и DMRC - ihe atọ dị mkpa iji melite ọrụ izipu email.

Nhazi nke ọma nke SPF, DKIM и DMARC ga-eme ka ntụkwasị obi nke sava ozi dịkwuo elu ma belata ohere nke ozi gị na-abanye na spam.

• SPF (Nhazi amụma ezipụ) bụ ihe nchekwa emebere iji gbochie ndị ọzọ izipu ozi-e n'aha gị. Ọ na-ekpebi adreesị IP ndị a na-ahapụ ka izipu ozi-e na ndị na-adịghị.
• DKIM (DomainKeys Identified Mail) bụ usoro nyocha ozi. Mgbe ezigara ozi-e ọ bụla, a na-eji igodo nzuzo abanye ya wee chọpụta na sava ozi na-enweta (ma ọ bụ onye na-ahụ maka ịntanetị) na igodo ọha DNS.
• DMARC (Nnyocha ozi dabere na ngalaba, mkpesa na nkwenye) na-eji SPF na DKIM maka nyocha ozi, na-ebelata spam na mwakpo phishing.

Nhazi SPF (Nhazi amụma ezipụ)

1.1. Iji hazie SPF, a ga-agbakwunye ndekọ TXT na ntọala DNS nke ngalaba gị.

1.2. Nke a bụ syntax nke ndekọ SPF:

• v=spf1: na-ekpebi ụdị SPF nke ị na-eji. Taa naanị SPF1 ka eji.
• ip4: [Your_Mail_Server_IP]: Ọ na-egosi na adreesị IP nke ihe nkesa ozi gị na-ekwe ka izipu email n'aha ngalaba gị.
• a: Ọ na-akọwapụta na ọ bụrụ na ngalaba nwere ndekọ (adreesị IPv4) na DNS, ihe nkesa akọwapụtara na ndekọ ahụ nwere ike izipu ozi email n'aha ngalaba ahụ.
• mx: Na-egosi na ọ bụrụ na ngalaba nwere ndekọ MX (mail Exchange) ndekọ na DNS, ihe nkesa akọwapụtara na ndekọ a nwere ike izipu ozi email n'aha ngalaba ahụ.
• ~ ihe niile: Ọ na-egosi na ọ bụ naanị sava na ndekọ SPF nwere ike izipu ozi email n'aha ngalaba. Ọ bụrụ na ozi-e sitere na ihe nkesa ọzọ, a ga-akara ya akara dị ka "egwuregwu dị nro" (~), nke pụtara na enwere ike ịnabata ya, mana akara dị ka spam nwere ike.

Ọnụ, ihe ndị a na-etolite SPF nke yiri nke a:

Aha: [Your_Domain]

v=spf1 ip4:[Your_Mail_Server_IP] a mx ~all

Dochie [Your_Mail_Server_IP] na adreesị IP nkesa email gị.

Nhazi DKIM (DomainKeys Identified Mail).

2.1. Mbụ wụnye opendkim na opendkim-tools. Usoro nwụnye dabere na sistemụ arụmọrụ:

Maka CentOS:

yum install opendkim -y

Maka Debian/Ubuntu:

apt install opendkim opendkim-tools -y

2.2. Na-esote, malite ọrụ opendkim ma mee ka mmalite ya n'oge buut:

systemctl start opendkim
systemctl enable opendkim

2.3. Mepụta ndekọ maka nchekwa igodo:

mkdir -p /etc/opendkim/keys/yourdomain.com

2.4. Mepụta igodo site na iji ngwa opendkim-genkey:

opendkim-genkey --directory /etc/opendkim/keys/yourdomain.com/ --domain yourdomain.com --selector dkim

Echefula iji ezigbo ngalaba aha gị dochie 'yourdomain.com'.

2.5. Tọọ ikike kwesịrị ekwesị maka igodo:

chown -R opendkim:opendkim /etc/opendkim/keys/yourdomain.com

2.6. Ugbu a, anyị kwesịrị ịhazi opendkim. Mepee faịlụ /etc/opendkim.conf ma tinye ntọala ndị a:

AutoRestart Yes
AutoRestartRate 10/1h
Umask 002
Syslog Yes
SyslogSuccess Yes
LogWhy Yes
Canonicalization relaxed/simple
ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
InternalHosts refile:/etc/opendkim/TrustedHosts
KeyTable refile:/etc/opendkim/KeyTable
SigningTable refile:/etc/opendkim/SigningTable
Mode sv
PidFile /var/run/opendkim/opendkim.pid
SignatureAlgorithm rsa-sha256
UserID opendkim:opendkim
Socket inet:8891@localhost

2.7. Tinye ngalaba gị na /etc/opendkim/TrustedHosts faịlụ

127.0.0.1
localhost
*.yourdomain.com

2.8. Dezie /etc/opendkim/KeyTable faịlụ ka ọ dị ka nke a:

dkim._domainkey.yourdomain.com yourdomain.com:dkim:/etc/opendkim/keys/yourdomain.com/dkim.private

2.9. Gbanwee faịlụ /etc/opendkim/signingTable. Ka ọ dị ka nke a

*@yourdomain.com dkim._domainkey.yourdomain.com

2.10. Ọ bụrụ na ị na-eji Debian/Ubuntu, kọwaa ọdụ ụgbọ mmiri opendkim:

echo 'SOCKET="inet:8891@localhost"' >> /etc/default/opendkim

2.11. Malitegharịa ọrụ opendkim ka etinyere mgbanwe:

systemctl restart opendkim

2.12. N'ikpeazụ, tinye igodo ọha na nhazi DNS nke ngalaba gị. Igodo ndị a dị na /etc/opendkim/keys/yourdomain.com/dkim.txt.

Nhazi DMARC (Nnyocha ozi dabere na ngalaba, mkpesa & nkwenye).

3.1. Iji hazie DMARC, tinye ndekọ TXT na ntọala ngalaba gị:

Name: _dmarc.[Your_Domain].
Значение: v=DMARC1; p=none; aspf=r; sp=none

Jiri aha ngalaba gị dochie [Your_Domain].

Nhazi PTR (Pointer Record).

4.1. A na-eji ndekọ PTR, nke a makwaara dị ka ndekọ DNS na-agbanwe agbanwe, iji gbanwee adreesị IP gaa na ngalaba aha. Nke a dị mkpa maka sava ozi n'ihi na ụfọdụ sava nwere ike jụ ozi na-enweghị ndekọ PTR.

4.2. A na-ahazi ndekọ PTR na ntọala nke ndị na-ahụ maka ịntanetị ma ọ bụ ndị na-eweta ọrụ. Ọ bụrụ na ị nwere ohere na ntọala ndị a, ị nwere ike ịtọ ndekọ PTR site na ịkọwa adreesị IP nke ihe nkesa gị na aha ngalaba ya kwekọrọ.

4.3. Ọ bụrụ na ịnweghị ohere na ntọala ndekọ PTR, kpọtụrụ onye na-ahụ maka ịntanetị gị ma ọ bụ onye na-eweta nnabata na arịrịọ nhazi ndekọ PTR.

4.4. Mgbe ị wụnye PTR, ị nwere ike ịlele ya site na iji iwu igwu na Linux:

dig -x your_server_IP

Dochie 'your_server_IP' na adreesị IP nke ihe nkesa gị. Nzaghachi kwesịrị ịgụnye aha ngalaba gị.

Mgbe ịmechara usoro niile nke ịhazi SPF, DKIM na DMARC, ihe nkesa ozi ga-adị obere ka ọ ga-edobe ozi ozi gị dị ka spam - ọ ga-ekwe nkwa na akwụkwọ ozi gị ruru ndị nnata.