Conversation

Notices

1. Embed this notice
   Paul Cantrell (inthehands@hachyderm.io)'s status on Thursday, 27-Apr-2023 05:32:00 JST Paul Cantrell

   DMARC / SPF question:

   Does anybody have opinions on best practices for configuring SPF soft fail / hard fail: which is the better setting, what the tradeoffs are, whether enough mail servers respect this setting to make it worth the bother, etc?

   #dns #sysadmin

   • Embed this notice
     Paul Cantrell (inthehands@hachyderm.io)'s status on Thursday, 27-Apr-2023 05:53:22 JST Paul Cantrell

     in reply to

     • Paul_IPv6

     @paul_ipv6 This is exactly the sort of thing I was looking for. Thank you.

   • Embed this notice
     Paul_IPv6 (paul_ipv6@infosec.exchange)'s status on Thursday, 27-Apr-2023 05:53:23 JST Paul_IPv6

     in reply to

     @inthehands

     this is a good start:

     https://www.m3aawg.org/documents/en/m3aawg-sender-best-common-practices-version-30

     there are some mailing lists, like mailop, once you've gotten through all of this.

     but the tl;dr on SPF hard fail, DMARC p=reject, etc. is they are more likely to throw out babies with bath water and will probably annoy users.