Differences

This shows you the differences between two versions of the page.

--- sysadmin:training [2015/01/07 17:26] – [Training] kobe
+++ sysadmin:training [2016/05/15 23:04] – added guide to dkim for trusted hosts feroda
@@ Line 1: / Line 1: @@
-====== Training for Ops ======
+==== SMTP configuration ====
-===== DevOps =====
+In order to have a working SMTP server we have to take care of "some" ;) points:
-  * http://www.devopsbookmarks.com/
+  * PTR reverse DNS record: ''dig +short ptr <reverse IP>.in-addr.arpa'' must give an hostname which DNS A record points to the <IP address> of your server.
+  * DNS:
+    * MX -> who exchange the mail for the domain?
+    * SPF -> which addresses can be originated from the MX?
+    * DKIM -> how are signed messages outgoing from the MX?
+    * DMARC -> what actions do you suggest to mail receivers' providers regarding the conf of SPF/DKIM and where you would like to receive reports from them to tune your mail settings?
+  * Furthermore we need working antispam and antivirus
+  * And of course SMTP server only relay local or TLS + authenticated connections
+  * Need to add DNS entries to the host that receives DMARC reports if domain is different from the one of the DMARC itself
+=== References ===
+  * https://wiki.zimbra.com/wiki/Best_Practices_on_Email_Protection:_SPF,_DKIM_and_DMARC
+  * https://workaround.org/ispmail/jessie
+  * https://workaround.org/ispmail/wheezy/smtpd-restrictions-spf-dkim-and-greylisting
+  * DKIM on STMP RELAY server (trust hosts...) http://www.stevejenkins.com/blog/2011/08/installing-opendkim-rpm-via-yum-with-postfix-or-sendmail-for-rhel-centos-fedora/
+=== SMTP/IMAPs tests ===
+  * SPF: http://tools.wordtothewise.com/spf/check/
+  * SPF, DKIM, Antispam: http://dkimvalidator.com send an email to the given address and view results
+  * DMARC: https://dmarcian.com/
+  * IMAPs: http://wiki.dovecot.org/TestInstallation
+  * SMTP: https://www.ndchost.com/wiki/mail/test-smtp-auth-telnet
+  * SMTPs: https://www.saotn.org/tls-test-smtp-auth-plain-authentication-and-verify-starttls-connections/
-===== Mail =====
-  * https://workaround.org/ispmail
-  * OpenDKIM:
-    * http://www.opendkim.org/opendkim-README
-    * https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-dkim-with-postfix-on-debian-wheezy