search

froxlor / Froxlor

The server administration software for your needs - The official Froxlor development Git repository
http://www.froxlor.org
GNU General Public License v2.0
1.63k stars 458 forks source link

Implement DMARC #662

Closed Logicbloke closed 9 months ago

Logicbloke commented 5 years ago

Hey guys,

Any plans to add support for DMARC? I think this is a simple one that can be added fairly simply.

d00p commented 5 years ago

Not high priority but yeah, sure.

llucps commented 5 years ago

Yes, it would be great that too. Since Froxlor doesn't have this feature, I did set up DMARC for all my domains manually. It wasn't difficult, but sure it's a nice to have.

LeBaux commented 5 years ago

Personally, I consider SPF/DMARC/DKIM support essential for a tool to manager web-server. While I understand it might not be a priority for everyone, it is a disqualifying factor for me.

d00p commented 5 years ago

it is essential yes, but it only makes sense if froxlor is the managing DNS server, froxlor cannot add/edit dns entries in foreign systems

LeBaux commented 5 years ago

If you look at the ISPConfig/Vesta and others, they just generate the records for you. I understand SPF/DMARC have little to do with Froxlor, but DKIM requires actual implementation. SPF/DMARC are simple from there, honestly.

d00p commented 5 years ago

we are froxlor and not ipsconfig or anything else. And i never said we won't implement generation of dmarc records, just that it only makes sense when using the dns feature which is not very heavily used among the users (almost noone runs their own nameserver). Also this issue is not about DKIM

discordier commented 5 years ago

(almost noone runs their own nameserver).

I do and would love having DMARC and DKIM! :smile_cat: Especially as DNS may now be changed via API - provides a way to have customers change their remote.example.org DNS entries which they need to make their "MS Exchange servers" reachable... I know it is not that common for ISPs to allow this but we do.

The problem I see is, how can one add "own" entries to these records (in this issue DMARC) like a custom rua or ruf per domain?

All of this needs much planning ahead and I do not see this happening in the mid-near future.

makuser commented 5 years ago

Is anybody working on this already, even little steps? I need this feature too.

Logicbloke commented 5 years ago

Yeah this one is just a DNS entry. I kind of let DMARC down since it prevented some of my emails from being delivered especially if the filter is at 100% and you're sending from Gmail or another IP. Exceptions can be added of course.

crazy4chrissi commented 4 years ago

I recommend to setup rspamd. It includes DKIM signing and checking, SPF checking and DMARC. And a really good spamfilter, better than amavisd/spamassasin. Sure you have to generate keys and configure them in DNS yourself. With the new Froxlor API, no problem to do so automatically for all domains configured in Froxlor.

Neustradamus commented 1 year ago

To follow this important ticket!

Neustradamus commented 9 months ago

@d00p: Excellent, good job!

Happy New Year 2024!