4 ms·
DNS settings to avoid email spoofing and phishing for unused domain
- mike_d 3y agoThis is a really long winded article clearly for SEO, here are the relevant records you need if you don't intended to send mail: example.com. IN MX 0 . example.com. IN SPF "v=spf1 -all" _dmarc.example.com. IN TXT "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s" *._domainkey.example.com. IN TXT "v=DKIM1; p=" Additionally if you don't need SSL certs example.com. IN CAA 0 issue ";" example.com. IN CAA 0 issuewild ";" example.com. IN CAA 0 iodef "mailto:your_email@example.net"
- citrin_ru 3y agoIt’s a good idea try to understand what you’re putting in your DNS zone so it is a good idea read an article first but I would recommend this one: https://www.ncsc.gov.uk/blog-post/protecting-parked-domains https://www.ncsc.gov.uk/blog-post/protecting-parked-domains
- egberts1 3y agoAnd DNS BIMI record too.
- egberts1 3y agoYet another DNS record required if NOT hosting a mail server: the TXT record for a properly disabled BIMI must look like this: default._bimi.example.test. TXT "v=BIMI1; l=; a=;" Much in the same way as SPF, Null MX, and DKIM being forced as disabled, you would not want other senders to mimic your logo (domain name) in other recipients’ mail client apps. https://egbert.net/blog/articles/smtp-bimi-howto.html https://egbert.net/blog/articles/smtp-bimi-howto.html