3 ms·

I've been doing it for well over 20 years now. Ingress - out of the box rspamd is pretty decent and it is rather configurable. Egress - DNS (A,AAAA, PTR), (E)

I've been doing it for well over 20 years now. Ingress - out of the box rspamd is pretty decent and it is rather configurable. Egress - DNS (A,AAAA, PTR), (E)HELO, SPF, DKIM, DMARC. "IP Reputation". There are absolutely no shortcuts and yet most of the problems I diagnose regarding email delivery will find a missing PTR record or a miss-configured (or non configured) HELO. You cannot be lazy when it comes to email. SPF + A + AAAA + PTR and (E)HELO is a minimum. There is one thing that you cannot generally, personally mitigate and that is being on a deny list due to your IP address. This one is a bit more tricky to deal with. You might have to use a relay. Another mitigation might involve IPv6.

rapind 4y ago
> Egress - DNS (A,AAAA, PTR), (E)HELO, SPF, DKIM, DMARC. "IP Reputation". Any insight into why this is a giant ball of complexity? I’ve had to setup spf, dkim, dmarc a couple times now and man… design by committee?
- n3storm 4y ago
  There is no design committee, they just keep adding stuff over and tell us is definitely the one that will fix security/phising/privacy/spam issues SMTP suffers.
- unixfg 4y ago
  I think it’s a miracle E-mail still works at all this far into web whatever-point-oh we’re in.
- pmlnr 4y ago
  That is not that complex...
- Avamander 4y ago
  They solve different things. Email is very old so obviously things are going to be tack-on rather than baked-in. The standards are fine in terms of achieving their goal, the hard part is getting the ecosystem to follow and make everyone's life easier.
stratosmacker 4y ago
Sorry for naivety, what is HELO in this context? I've been running a mail server with the other aforementioned things set correctly and tested; I've been able to reliably deliver mail to all of the big senders for years now, albeit on a small scale. Am I missing something not knowing what HELO is ??
- account42 4y ago
  HELO (or more usually EHLO) is the initial greeting of SMTP protocol which includes the mail server's address. AFAIK plenty ofservers will outright reject all mail if you only have an IP address and not a domain name there.

rapind 4y ago

> Egress - DNS (A,AAAA, PTR), (E)HELO, SPF, DKIM, DMARC. "IP Reputation". Any insight into why this is a giant ball of complexity? I’ve had to setup spf, dkim, dmarc a couple times now and man… design by committee?

n3storm 4y ago
There is no design committee, they just keep adding stuff over and tell us is definitely the one that will fix security/phising/privacy/spam issues SMTP suffers.
unixfg 4y ago
I think it’s a miracle E-mail still works at all this far into web whatever-point-oh we’re in.
pmlnr 4y ago
That is not that complex...
Avamander 4y ago
They solve different things. Email is very old so obviously things are going to be tack-on rather than baked-in. The standards are fine in terms of achieving their goal, the hard part is getting the ecosystem to follow and make everyone's life easier.

stratosmacker 4y ago

Sorry for naivety, what is HELO in this context? I've been running a mail server with the other aforementioned things set correctly and tested; I've been able to reliably deliver mail to all of the big senders for years now, albeit on a small scale. Am I missing something not knowing what HELO is ??

account42 4y ago
HELO (or more usually EHLO) is the initial greeting of SMTP protocol which includes the mail server's address. AFAIK plenty ofservers will outright reject all mail if you only have an IP address and not a domain name there.