Otu esi akwado nkwenye email gị nke ọma (DKIM, DMRC, SPF)

DKIM Validator DMRC SPF

Ọ bụrụ na ị na-ezipụ ozi-e n'ụdị olu ọ bụla, ọ bụ ụlọ ọrụ ebe a na-eche gị ikpe ma gosipụta na aka gị dị ọcha. Anyị na-arụkọ ọrụ na ọtụtụ ụlọ ọrụ na-enyere ha aka na mbugharị email ha, ikpo ọkụ IP na okwu nnyefe. Ọtụtụ ụlọ ọrụ anaghị aghọta na ha nwere nsogbu ma ọlị.

Nsogbu na-adịghị ahụ anya nke nnapụta

Enwere nsogbu atọ a na-adịghị ahụ anya na nnyefe email nke ụlọ ọrụ na-amaghị:

  1. ikike - Ndị na-enye ọrụ email (ESP) jikwaa ikike nbanye… mana onye na-eweta ọrụ ịntanetị (ISP) na-ejikwa ọnụ ụzọ ámá maka adreesị ozi-e ebe aga. Ọ bụ n'ezie a egwu usoro. Ị nwere ike ime ihe niile ziri ezi dị ka azụmahịa iji nweta ikike na adreesị ozi-e, na ISP enweghị echiche ma nwee ike igbochi gị agbanyeghị.
  2. Ntinye igbe - ESP na-akwalite elu nnapụta ọnụego ndị bụ isi nzuzu. A na-ebuga ozi-e nke ebufere ozugbo na folda junk nke onye debanyere aha email gị na-ahụtụbeghị. Iji nyochaa gị n'ezie ntinye igbe, ị ga-eji ndepụta mkpụrụ wee gaa lelee ISP ọ bụla. Enwere ọrụ na-eme nke a.
  3. Ntughari - ISPs na ọrụ ndị ọzọ na-ejikwa akara aha maka izipu adreesị IP maka email gị. Enwere ndetu ojii nke ndị ISP nwere ike iji gbochie ozi-e gị niile, ma ọ bụ na ị nwere aha ọjọọ nke ga-eme ka ị banye na nchekwa junk. Enwere ọtụtụ ọrụ ị nwere ike iji nyochaa aha IP gị… mana m ga-enwe nkụda mmụọ ebe ọtụtụ anaghị enwe nghọta n'ime algọridim ISP ọ bụla.

Nyocha email

Omume kachasị mma maka ibelata okwu ntinye igbe mbata ọ bụla bụ ịhụ na ị debere ọtụtụ ndekọ DNS nke ndị ISP nwere ike iji lelee ma hụ na ozi ịntanetị ị na-eziga bụ nke gị n'ezie zitere ọ bụghị onye na-eme ka ọ bụ ụlọ ọrụ gị. . A na-eme nke a site n'ọtụtụ ụkpụrụ:

  • Okpokoro Ozi N'uba (SPF) - ọkọlọtọ kacha ochie gburugburu, nke a bụ ebe ị debanyere ndekọ TXT na ndebanye aha ngalaba gị (DNS) nke na-ekwu ụdị ngalaba ma ọ bụ adreesị IP ị na-eziga email maka ụlọ ọrụ gị. Dịka ọmụmaatụ, ana m ezipu ozi-e maka Martech Zone si Oghere Google na site CircuPress (ESP nke m ugbu a na beta). Enwere m ngwa mgbakwunye SMTP na weebụsaịtị m iji zipu site na Google, ma ọ bụghị ya, m ga-enwe adreesị IP gụnyere na nke a.

v=spf1 include:circupressmail.com include:_spf.google.com ~all

  • domain-dabere na nkwenye ozi, mkpesa na nkwenye (DMARC) – ọkọlọtọ ọhụrụ a nwere igodo ezoro ezo na ya nke nwere ike kwado ma ngalaba m na onye zitere m. Onye na-ezigara m na-emepụta igodo ọ bụla, na-ahụ na ozi-e nke onye spam na-ezitere enweghị ike ịkatọ ya. Ọ bụrụ na ị na-eji Google Workspace, ebe a otu esi ahazi DMARC.
  • Ozi achọpụtara DomainKys (Dkim) - Na-arụ ọrụ n'akụkụ ndekọ DMRC, ndekọ a na-agwa ndị ISP otu esi emeso DMRC na iwu SPF m yana ebe a ga-eziga akụkọ ọ bụla na-enyefe. Achọrọ m ka ndị ISP jụ ozi ọ bụla na-agaghị agafe DKIM ma ọ bụ SPF, achọrọ m ka ha ziga akụkọ na adreesị ozi-e ahụ.

v=DMARC1; p=reject; rua=mailto:dmarc@martech.zone; adkim=r; aspf=s;

  • Ndị na -egosi akara maka njirimara ozi (BIMI) - mgbakwunye ọhụrụ kachasị ọhụrụ, BIMI na-enye ụzọ maka ISPs na ngwa email ha iji gosipụta akara ngosi nke ika ahụ n'ime onye ahịa email. Enwere ma ọkọlọtọ mepere emepe yana nke ọkọlọtọ ezoro ezo maka Gmail ebe ị ga-achọkwa akwụkwọ ezoro ezo. Asambodo ndị ahụ dị oke ọnụ, yabụ anaghị m eme nke ahụ.

v=BIMI1; l=https://martech.zone/logo.svg;a=self;

IHE: Ọ bụrụ na ịchọrọ enyemaka na ịtọlite ​​​​nnwale email gị ọ bụla, egbula oge ịkpọtụrụ ụlọ ọrụ m. Highbridge. Anyị nwere otu nke ndị ọkachamara ịzụ ahịa email na nnyefe nke nwere ike inye aka.

Otu esi akwado nkwenye email gị

Ozi isi mmalite niile, ozi relay na ozi nkwado metụtara email ọ bụla ka a na-ahụ n'ime nkụnye ndị isi ozi. Ọ bụrụ na ị bụ ọkachamara nnyefe, ịkọwa ihe ndị a dị mfe… mana ọ bụrụ na ị bụ onye novice, ha siri ike nke ukwuu. Nke a bụ ihe nkụnye eji isi mee ozi dị maka akwụkwọ akụkọ anyị, ewepụla m ụfọdụ ozi ịntanetị na-azaghachi na ozi mkpọsa:

Isi ozi - DKIM na SPF

Ọ bụrụ na ị gụọ, ị nwere ike ịhụ ihe iwu DKIM m bụ, ma DMRC na-agafe (ọ naghị eme) yana SPF gafere ... mana nke ahụ bụ ọtụtụ ọrụ. Otú ọ dị, enwere usoro ka mma karịa, nke ahụ bụ iji DKIMValidator. DKIMValidator na-enye gị adreesị ozi-e nke ị nwere ike itinye na listi akwụkwọ akụkọ gị ma ọ bụ zipu site na email ụlọ ọrụ gị… na ha na-atụgharị ozi nkụnye eji isi mee ka ọ bụrụ akụkọ mara mma:

Nke mbụ, ọ na-akwado izo ya DMRC m na mbinye aka DKIM iji hụ ma ọ gafere ma ọ bụ na ọ gafere (ọ naghị agafe).

DKIM Information:
DKIM Signature

Message contains this DKIM Signature:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=circupressmail.com;
	s=cpmail; t=1643110423;
	bh=PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=;
	h=Date:To:From:Reply-to:Subject:List-Unsubscribe;
	b=HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=


Signature Information:
v= Version:         1
a= Algorithm:       rsa-sha256
c= Method:          relaxed/relaxed
d= Domain:          circupressmail.com
s= Selector:        cpmail
q= Protocol:        
bh=                 PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=
h= Signed Headers:  Date:To:From:Reply-to:Subject:List-Unsubscribe
b= Data:            HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=
Public Key DNS Lookup

Building DNS Query for cpmail._domainkey.circupressmail.com
Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+D53OskK3EM/9R9TrX0l67Us4wBiErHungTAEu7DEQCz7YlWSDA+zrMGumErsBac70ObfdsCaMspmSco82MZmoXEf9kPmlNiqw99Q6tknblJnY3mpUBxFkEX6l0O8/+1qZSM2d/VJ8nQvCDUNEs/hJEGyta/ps5655ElohkbiawIDAQAB
Validating Signature

result = fail
Details: body has been altered

Mgbe ahụ, ọ na-elele ndekọ SPF m ka ọ hụ ma ọ gafere (ọ na-eme):

SPF Information:
Using this information that I obtained from the headers

Helo Address = us1.circupressmail.com
From Address = info@martech.zone
From IP      = 74.207.235.122
SPF Record Lookup

Looking up TXT SPF record for martech.zone
Found the following namesevers for martech.zone: ns57.domaincontrol.com ns58.domaincontrol.com
Retrieved this SPF Record: zone updated 20210630 (TTL = 600)
using authoritative server (ns57.domaincontrol.com) directly for SPF Check
Result: pass (Mechanism 'include:circupressmail.com' matched)

Result code: pass
Local Explanation: martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)
spf_header = Received-SPF: pass (martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)) receiver=ip-172-31-60-105.ec2.internal; identity=mailfrom; envelope-from="info@martech.zone"; helo=us1.circupressmail.com; client-ip=74.207.235.122

N'ikpeazụ, ọ na-enye m nghọta na ozi ahụ n'onwe ya yana ma ọdịnaya ahụ nwere ike ịkọ ụfọdụ ngwaọrụ nchọpụta SPAM, lelee ma m nọ na listi ojii, wee gwa m ma ọ bụ na akwadoro ka iziga ya na folda junk:

SpamAssassin Score: -4.787
Message is NOT marked as spam
Points breakdown: 
-5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                            high trust
                            [74.207.235.122 listed in list.dnswl.org]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                            identical to background
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                            Colors in HTML
 0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid

Jide n'aka na ị ga-anwale ọrụ ozi ESP ọ bụla ma ọ bụ ozi ndị ọzọ nke ụlọ ọrụ gị na-ezipụ ozi-e iji hụ na edobere nkwenye email gị nke ọma!

Jiri DKIM Validator nwalee email gị

Ngosipụta: Ana m eji njikọ njikọta m maka Oghere Google ke ibuotikọ emi.