Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2018-07-21, 05:46:53

Author Topic: DMARC txt records does not work properly ?  (Read 9452 times)

0 Members and 1 Guest are viewing this topic.

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
DMARC txt records does not work properly ?
« on: 2015-04-22, 19:35:34 »
Please see: http://www.dnsinspect.com/forum.mratwork.com

"NOTICE: Domain doesn't have DMARC record. DMARC (Domain-based Message Authentication, Reporting & Conformance) helps reducing potential of email-based abuse such as spam and phishing e-mails."

I'm using pdns and also the same ;(

This is my entry:

Quote
v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=mailto:d@rua.agari.com; fo=1
« Last Edit: 2015-04-22, 20:46:30 by Spacedust »

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #1 on: 2015-04-22, 22:47:45 »
It seems DMARC is being messed up with SPF:

 Identical TXT records
FAIL: Your name servers returned different TXT records:

Quote
    37.187.123.56 ? v=spf1 a mx ~all v=spf1 a mx -all v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=mailto:d@rua.agari.com; fo=1
    78.46.85.86 ? v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=mailto:d@rua.agari.com; fo=1 v=spf1 a mx -all v=spf1 a mx ~all
    78.46.85.90 ? v=spf1 a mx -all v=spf1 a mx ~all v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=mailto:d@rua.agari.com; fo=1

Only SPF records are compared, all name servers should return identical SPF records.
Identical SPF records
FAIL: Your name servers returned different SPF records:

Quote
    37.187.123.56 ? v=spf1 a mx -all v=spf1 a mx ~all
    78.46.85.86 ? v=spf1 a mx ~all v=spf1 a mx -all
    78.46.85.90 ? v=spf1 a mx ~all v=spf1 a mx -all

All name servers should return identical SPF records.

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,382
  • Karma: +115/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: DMARC txt records does not work properly ?
« Reply #2 on: 2015-04-22, 23:15:58 »
Try:
Code: [Select]
dig hostspectra.com TXT @ns1.hostspectra.com
dig hostspectra.com TXT @ns2.hostspectra.com
dig hostspectra.com TXT @ns3.hostspectra.com
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --


Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,382
  • Karma: +115/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: DMARC txt records does not work properly ?
« Reply #4 on: 2015-04-23, 01:24:30 »
No it's work.

Previous problem because using 'domain.com TXT "v=DMARC1;..."' instead '_dmarc.domain.com TXT "v=DMARC1;..."'

Will be update in next upload. Thanks.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #5 on: 2015-04-23, 13:34:24 »
No it's work.

Previous problem because using 'domain.com TXT "v=DMARC1;..."' instead '_dmarc.domain.com TXT "v=DMARC1;..."'

Will be update in next upload. Thanks.

Nice found ! Yes we were using just domain instead of _dmarc ;)

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #6 on: 2015-04-23, 16:27:07 »
After readding DMARC now I got two records on all of my domains:

Quote
   __base__    TXT    -    v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=...
   _dmarc    TXT    -    v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=...

How to remove the upper one from all domains ?

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,382
  • Karma: +115/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: DMARC txt records does not work properly ?
« Reply #7 on: 2015-04-23, 16:36:54 »
Use dmarc via 'email auth' only (new default rui using 'admin@__base__') with click 'update all'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #8 on: 2015-04-23, 18:47:29 »
Use dmarc via 'email auth' only (new default rui using 'admin@__base__') with click 'update all'.

I got my own entries in DNS template. Rebuild the template does not remove these records ;(

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,382
  • Karma: +115/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: DMARC txt records does not work properly ?
« Reply #9 on: 2015-04-23, 19:10:33 »
Use dmarc via 'email auth' only (new default rui using 'admin@__base__') with click 'update all'.

I got my own entries in DNS template. Rebuild the template does not remove these records ;(
Check dmarc for google.com. Their dmarc is more simple than Kloxo-MR do.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #10 on: 2015-04-23, 19:12:28 »
I know, DMARC is working fine for me.

Now I only want to remove these entries for all domains (about 1300 domains):

 __base__    TXT    -    v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=...

Also please make DNS fields a bit longer... ;)

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,382
  • Karma: +115/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: DMARC txt records does not work properly ?
« Reply #11 on: 2015-04-23, 19:48:54 »
Create/modified template without entry for 'dmarc' and then rebuild in 'manage dns' with this template.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #12 on: 2015-04-23, 23:02:39 »
Create/modified template without entry for 'dmarc' and then rebuild in 'manage dns' with this template.

The wrong TXT entry remains - only new or the same entires are being modifed.

Quote
__base__    TXT    -    v=DMARC1; p=none; ruf=mailto:d@ruf.agari.com; rua=...

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 3,962
  • Karma: +1/-0
    • View Profile
Re: DMARC txt records does not work properly ?
« Reply #13 on: 2015-04-23, 23:16:50 »
That's weird all other entries which does not exists in a new template (A, NS, FCNAME etc.) are removed but this wrong TXT is still untouched :(

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,382
  • Karma: +115/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: DMARC txt records does not work properly ?
« Reply #14 on: 2015-04-24, 05:45:29 »
I will try to emulate your setting.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix

Page created in 0.063 seconds with 23 queries.

web stats analysis