search

phpmyadmin / scripts

Various scripts related to project
15 stars 19 forks source link

Missing DMARC Policy #33

Closed nijel closed 1 year ago

nijel commented 7 years ago

Reported by Emanuel Bronshtein:

Missing DMARC Policy

more information about DMARC: https://dmarc.org/wiki/FAQ https://support.google.com/a/answer/2466580?hl=en

The following online tools can be used to view DMARC policy:

  1. https://dmarcian.com/dmarc-inspector/
  2. https://mxtoolbox.com/dmarc.aspx
Note: for example my domain e3amn2l.com has "v=DMARC1; p=none; adkim=s; aspf=s; fo=1; rua=mailto:dmarc-feedback@e3amn2l.com; ruf=mailto:dmarc-reports@e3amn2l.com" policy.

fix:

  1. Implement DMARC policy: https://support.google.com/a/answer/2466563?hl=en which will report feedback & reports via "rua" & "ruf" options, it's recommended to start with p=none; and change the p value to quarantine/reject afterwards.
ibennetch commented 7 years ago

This really depends on phpmyadmin/scripts#32 first (even with p=none, it seems to still be best to implement DKIM first).

williamdes commented 1 year ago

We have since some years a DMARC policy: v=DMARC1; p=quarantine; sp=quarantine; adkim=s; fo=1; ri=3600; rua=mailto:xxxxx-rua@phpmyadmin.net; ruf=mailto:xxxx-ruf@phpmyadmin.net