Mokhoa oa ho netefatsa netefatso ea lengolo-tsoibila la hau e thehiloe ka nepo (DKIM, DMARC, SPF)

DKIM Validator DMARC SPF

Haeba u romella lengolo-tsoibila ka mofuta ofe kapa ofe oa molumo, ke indasteri moo u nkoang u le molato 'me u tlameha ho paka hore ha u na molato. Re sebetsa le lik'hamphani tse ngata tse ba thusang ka ho falla ha mangolo-tsoibila, ho futhumala ha IP, le mathata a ho fana ka thepa. Lik'hamphani tse ngata ha li elelloe le hore li na le bothata ho hang.

Mathata a sa Bonahaleng a Pholoso

Ho na le mathata a mararo a sa bonahaleng mabapi le ho fana ka lengolo-tsoibila leo likhoebo li sa li tsebeng:

  1. Lumello - Bafani ba litšebeletso tsa imeile (ESP) laola tumello ea ho kena… empa mofani oa litšebeletso tsa inthanete (ISP) e laola tsela ea aterese ea lengolo-tsoibila eo u eang ho eona. Ke tsamaiso e mpe ruri. U ka etsa ntho e 'ngoe le e' ngoe hantle joalo ka khoebo ho fumana tumello le liaterese tsa lengolo-tsoibila, 'me ISP ha e na mohopolo ebile e kanna ea u thibela.
  2. Tlhophiso ea Inbox - Li-ESP li phahamisa holimo phepelo litefiso tseo ha e le hantle e leng lefeela. Lengolo-tsoibila le romelloang ka kotloloho ho sephutheloana sa litšila 'me ha le so bonoe ke motho ea ngolisitseng lengolo-tsoibila le romelloa ka botekgeniki. E le hore u ele hloko ka 'nete ea hau ho kenya inbox, o tlameha ho sebelisa lenane la peo ebe o ea sheba ISP ka 'ngoe. Ho na le litšebeletso tse etsang sena.
  3. Botumo - Li-ISP le lits'ebeletso tsa motho oa boraro le tsona li boloka lintlha tse tsebahalang bakeng sa aterese ea IP ea lengolo-tsoibila la hau. Ho na le li-blacklist tseo li-ISP li ka li sebelisang ho thibela lengolo-tsoibila la hau kaofela, kapa u ka ba le botumo bo bobe bo ka etsang hore u tsamaisetsoe foldareng ea litšila. Ho na le lits'ebeletso tse 'maloa tseo u ka li sebelisang ho beha leihlo botumo ba hau ba IP… empa ke tla hloka tšepo kaha batho ba bangata ha ba na temohisiso ea li-algorithms tsa ISPs.

Netefatso ea Imeile

Mekhoa e metle ea ho fokotsa mathata leha e le afe a ho beha li-inbox ke ho etsa bonnete ba hore u thehile lirekoto tse ngata tsa DNS tseo ISPs li ka li sebelisang ho sheba le ho netefatsa hore mangolo-tsoibila ao u a romellang a rometsoe ke uena e le kannete eseng ke motho ea iketsang eka ke k'hamphani ea hau. . Sena se etsoa ka litekanyetso tse 'maloa:

  • Moralo oa Leano la Sender (SPF) - maemo a khale ka ho fetesisa, ke moo o ngolisang rekoto ea TXT ho ngoliso ea hau ea domain.DNS) e bolelang hore na ke libaka life kapa liaterese tsa IP tseo u li romellang lengolo-tsoibila bakeng sa k'hamphani ea hau. Ka mohlala, ke romella lengolo-tsoibila bakeng sa Martech Zone ho tloha Sebaka sa Mosebetsi sa Google le ho tswa CircuPress (ESP ea ka hajoale e ho beta). Ke na le plugin ea SMTP webosaeteng ea ka eo ke lokelang ho e romella ka Google, ho seng joalo ke tla ba le aterese ea IP e kenyellelitsoeng ho sena.

v=spf1 include:circupressmail.com include:_spf.google.com ~all

  • domain name-e thehiloeng ho Netefatso ea Molaetsa, Tlaleho le Tumellano (EA-XNUMX-DM) - Tekanyetso ena e ncha e na le senotlolo se patiloeng ho eona se ka netefatsang sebaka sa ka le moromeli. Senotlolo se seng le se seng se hlahisoa ke moromeli oa ka, ho netefatsa hore mangolo-tsoibila a rometsoeng ke spammer a ke ke a senyeha. Haeba u sebelisa Google Workspace, mona ke tsena mokhoa oa ho theha DMARC.
  • DomainKeys Identified Mail (DKIM) - E sebetsa hammoho le rekoto ea DMARC, rekoto ena e tsebisa li-ISPs mokhoa oa ho tšoara melao ea ka ea DMARC le SPF hammoho le hore na li ka romella litlaleho life kapa life tsa phepelo. Ke batla hore li-ISP li hane melaetsa efe kapa efe e sa feteng DKIM kapa SPF, 'me ke batla hore ba romele litlaleho atereseng eo ea lengolo-tsoibila.

v=DMARC1; p=reject; rua=mailto:dmarc@martech.zone; adkim=r; aspf=s;

  • Matšoao a Brand bakeng sa Boitsebiso ba Molaetsa (BIMI) - tlatsetso e ncha ka ho fetesisa, BIMI e fana ka mokhoa oa li-ISP le likopo tsa bona tsa lengolo-tsoibila ho bonts'a lets'oao la lebitso ka har'a moreki oa lengolo-tsoibila. Ho na le maemo a bulehileng le a maemo a encrypted bakeng sa Gmail moo o hlokang le setifikeiti se encrypted. Lisetifikeiti li turu haholo kahoo ha ke so etse joalo hajoale.

v=BIMI1; l=https://martech.zone/logo.svg;a=self;

TLHOKOMELISO: Haeba u hloka thuso mabapi le ho theha netefatso ea lengolo-tsoibila la hau, u seke oa tsilatsila ho ikopanya le feme ea ka. Highbridge. Re na le sehlopha sa li-imeile tsa mebaraka le litsebi tsa ho fana seo se ka thusa.

Mokhoa oa ho netefatsa netefatso ea hau ea lengolo-tsoibila

Lintlha tsohle tsa mohloli, tlhaiso-leseling e fetisetsoang, le tlhaiso-leseling ea netefatso e amanang le lengolo-tsoibila le leng le le leng li fumanoa ka har'a lihlooho tsa molaetsa. Haeba u setsebi sa ho fana ka litšebeletso, ho bonolo ho fetolela tsena… empa haeba u le moithuti, li thata haholo. Mona ke seo sehlooho sa molaetsa se shebahalang ka sona bakeng sa lengolo la rona la litaba, ke kentse tse ling tsa li-imeile tsa autoresponse le tlhaiso-leseling ea lets'olo:

Sehlooho sa Molaetsa - DKIM le SPF

Ha u bala kaofela, u ka bona hore na melao ea ka ea DKIM ke efe, hore na DMARC ea feta (ha e fete) le hore SPF ea feta… empa oo ke mosebetsi o mongata. Leha ho le joalo, ho na le mokhoa o betere oa ho sebetsa, 'me o lokela ho sebelisoa Tlhatlhobo ea DKIM. DKIMValidator e u fa aterese ea lengolo-tsoibila eo u ka e kenyang lethathamong la litaba tsa hau kapa oa e romella ka lengolo-tsoibila la ofisi…

Taba ea pele, e netefatsa encryption ea ka ea DMARC le signature ea DKIM ho bona hore na ea feta kapa che (ha e fete).

DKIM Information:
DKIM Signature

Message contains this DKIM Signature:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=circupressmail.com;
	s=cpmail; t=1643110423;
	bh=PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=;
	h=Date:To:From:Reply-to:Subject:List-Unsubscribe;
	b=HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=


Signature Information:
v= Version:         1
a= Algorithm:       rsa-sha256
c= Method:          relaxed/relaxed
d= Domain:          circupressmail.com
s= Selector:        cpmail
q= Protocol:        
bh=                 PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=
h= Signed Headers:  Date:To:From:Reply-to:Subject:List-Unsubscribe
b= Data:            HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=
Public Key DNS Lookup

Building DNS Query for cpmail._domainkey.circupressmail.com
Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+D53OskK3EM/9R9TrX0l67Us4wBiErHungTAEu7DEQCz7YlWSDA+zrMGumErsBac70ObfdsCaMspmSco82MZmoXEf9kPmlNiqw99Q6tknblJnY3mpUBxFkEX6l0O8/+1qZSM2d/VJ8nQvCDUNEs/hJEGyta/ps5655ElohkbiawIDAQAB
Validating Signature

result = fail
Details: body has been altered

Ebe, e sheba rekoto ea ka ea SPF ho bona hore na ea feta (ea feta):

SPF Information:
Using this information that I obtained from the headers

Helo Address = us1.circupressmail.com
From Address = info@martech.zone
From IP      = 74.207.235.122
SPF Record Lookup

Looking up TXT SPF record for martech.zone
Found the following namesevers for martech.zone: ns57.domaincontrol.com ns58.domaincontrol.com
Retrieved this SPF Record: zone updated 20210630 (TTL = 600)
using authoritative server (ns57.domaincontrol.com) directly for SPF Check
Result: pass (Mechanism 'include:circupressmail.com' matched)

Result code: pass
Local Explanation: martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)
spf_header = Received-SPF: pass (martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)) receiver=ip-172-31-60-105.ec2.internal; identity=mailfrom; envelope-from="info@martech.zone"; helo=us1.circupressmail.com; client-ip=74.207.235.122

Qetellong, e mpha temohisiso ea molaetsa ka boeona le hore na litaba li ka tšoaea lisebelisoa tse ling tsa ho lemoha tsa SPAM, li hlahloba ho bona hore na ke lethathamong la batho ba sa sebetseng, 'me li mpolella hore na ho khothaletsoa ho romelloa foldareng kapa che:

SpamAssassin Score: -4.787
Message is NOT marked as spam
Points breakdown: 
-5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                            high trust
                            [74.207.235.122 listed in list.dnswl.org]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                            identical to background
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                            Colors in HTML
 0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid

Etsa bonnete ba hore o leka ESP e 'ngoe le e 'ngoe kapa tšebeletso ea melaetsa ea mokha oa boraro eo k'hamphani ea hau e romellang lengolo-tsoibila ho tsoa ho netefatsa hore Netefatso ea Imeile ea hau e setiloe hantle!

Lekola lengolo-tsoibila la hau ka DKIM Validator

Tlhaloso: Ke sebelisa sehokelo sa ka sa kopanelo bakeng sa Sebaka sa Mosebetsi sa Google sehloohong sena.