[afnog] AFNOG SPF CHECK

[Mark Elkins]

On 11/21/18 9:18 PM, Mathias HOUNGBO wrote:
>
> Hello Abeaku
>
> normaly, with no spf record for a domain, you MTA *must* accept mails
> from this domain !
>

Tell that to the likes of gmail... and many others.

I see nothing wrong with our leading educational lights of African
Internet switching on more security. SPF is pretty easy. DMARC could
also happen. I'd also like to see DNSSEC enabled for the afnog.org
domain, then add  DANE records too, for both Web and Mail services. The
site has a "Let's Encrypt" certificate and is dual stacked already!

The website, mailserver and domain should be a prime example for others
to follow.


> -- 
> My NGO IGBANET - http://www.igbanet.bj | My blog - http://mathias.houngbo.net
> Le 21/11/2018 à 18:43, Abeaku Badu Arthur a écrit :
>> Dear Colleagues,
>>
>> i recently enabled spf check on incoming mails and afnog at afnog.org
>> failed the test and so was rejected.
>> I don't want to disable the spf check as this is preventing spammers
>> from hitting our clients.
>> So can afnog create an spf record for the MTA.
>> Thank you.
>>
>> _______________________________________________
>> afnog mailing list
>> https://www.afnog.org/mailman/listinfo/afnog
>
> _______________________________________________
> afnog mailing list
> https://www.afnog.org/mailman/listinfo/afnog

-- 
Mark James ELKINS  -  Posix Systems - (South) Africa
mje at posix.co.za       Tel: +27.128070590  Cell: +27.826010496
For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.afnog.org/pipermail/afnog/attachments/20181122/e72f5973/attachment.html>