[Email Deliverability] Most recent instances (.BE, .DE, .CA and .NET) have no DMARC and SPF records

openfoodfoundation / openfoodnetwork

Connect suppliers, distributors and consumers to trade local produce.

https://www.openfoodnetwork.org

GNU Affero General Public License v3.0

1.11k stars 718 forks source link

[Email Deliverability] Most recent instances (.BE, .DE, .CA and .NET) have no DMARC and SPF records #4494

Closed luisramos0 closed 4 years ago

luisramos0 commented 4 years ago

Description

Screenshot 2019-11-25 at 15 43 26

We need to add DMARC and SPF records for these 4 domains.

Re dmarc record:

mxtoolbox can generate dmarc records

Re the spf record:

For the gmail ones AU, CA according to this we need to add something like: v=spf1 include:_spf.google.com ~all.
For the sendgrid ones US, DE and BE, according to this we need to add something like this: v=spf1 include:sendgrid.net ~all

luisramos0 commented 4 years ago

I have added spf and dmarc records for DE and US (these are on the same godaddy account as AUS) Confirmed on mxtoolbox: SPF and DMARC are fixed for DE and US, reports of DE, US and AU are being sent to tech _ at openfoodfoundation

we are now missing BE and CA

luisramos0 commented 4 years ago

ok, CA is done.

Only BE missing.

Matt-Yorkley commented 4 years ago

I've just had a look and BE isn't on the UK's hosting account. I'm not sure where their DNS record are kept...

luisramos0 commented 4 years ago

from whois I see it's on https://www.dnsbelgium.be ping @RachL maybe Theo will have the credentials?

RachL commented 4 years ago

@luisramos0 @Matt-Yorkley Theo says he has no idea and apparently nobody else in Oxfam was involved... ?

sigmundpetersen commented 4 years ago

I think BE is hosted on OVH at least, but maybe that's not what you're looking for.

Matt-Yorkley commented 4 years ago

Maybe it's in their OVH account then... I'll take another look

luisramos0 commented 4 years ago

more info here: https://www.dnsbelgium.be/en/whois/info/openfoodnetwork.be/details it points to https://www.123-reg.co.uk/ and it also points to heg.com which mentions godaddy...

Matt-Yorkley commented 4 years ago

Yeah it looks like it's with 123-reg.co.uk

Matt-Yorkley commented 4 years ago

I've added the credentials to Bitwarden and I'll have a look at SPF records now.

Matt-Yorkley commented 4 years ago

BE now has a valid SPF record :+1:

Matt-Yorkley commented 4 years ago

BE now has a DMARC record as well, with reports going to the tech@ address (along with UK reports) :+1:

luisramos0 commented 4 years ago

looks good here https://mxtoolbox.com/Pro/domain/openfoodnetwork.be//#/ thanks Matt! closing this, we can now track the dmarc reports and the errors in #4496

luisramos0 commented 4 years ago

reopening, I missed Katuma. https://mxtoolbox.com/Pro/domain/katuma.org/#/ @sauloperez do you want to give me access or do you want to add it yourself?

sauloperez commented 4 years ago

Done! no more errors for katuma.org

luisramos0 commented 4 years ago

thanks!!!!

sauloperez commented 4 years ago

thanks for dealing with the issue so efficiently just telling me what to do. Much appreciated :trollface: