Momwe Mungatsimikizire Kutsimikizika Kwa Imelo Yanu Kumakhazikitsidwa Molondola (DKIM, DMARC, SPF)

DKIM Wotsimikizira DMARC SPF

Ngati mukutumiza imelo pamtundu uliwonse wa voliyumu, ndimakampani omwe mumaganiziridwa kuti ndinu olakwa ndipo muyenera kutsimikizira kuti ndinu osalakwa. Timagwira ntchito ndi makampani ambiri omwe amawathandiza ndi kusamuka kwa maimelo, kutentha kwa IP, ndi zovuta zobweretsera. Makampani ambiri sadziwa nkomwe kuti ali ndi vuto.

Mavuto Osaoneka a Kutulutsidwa

Pali mavuto atatu osawoneka ndi kutumiza maimelo omwe mabizinesi sadziwa:

  1. Chilolezo - Othandizira maimelo (ESP) wongolera zilolezo zolowa… koma wopereka chithandizo pa intaneti (ISP) imayang'anira khomo la imelo yopita. Ndi dongosolo loyipa kwambiri. Mutha kuchita zonse moyenera ngati bizinesi kuti mupeze chilolezo ndi ma adilesi a imelo, ndipo ISP sadziwa ndipo ikhoza kukulepheretsani.
  2. Kuyika Makalata Obwera - ESPs imalimbikitsa kwambiri kuperekera mitengo yomwe kwenikweni ndi yachabechabe. Imelo yomwe imatumizidwa mwachindunji ku foda yopanda kanthu ndipo osawonedwa ndi olembetsa imelo imaperekedwa mwaukadaulo. Kuti muyang'ane moona mtima wanu kusungidwa kwa inbox, muyenera kugwiritsa ntchito mndandanda wa mbewu ndikupita kukayang'ana pa ISP iliyonse. Pali mautumiki omwe amachita izi.
  3. Mbiri - Ma ISPs ndi ntchito za chipani chachitatu zimasunganso mbiri yotumizira adilesi ya IP ya imelo yanu. Pali mindandanda yakuda yomwe ma ISP angagwiritse ntchito kutsekereza maimelo anu onse palimodzi, kapena mutha kukhala ndi mbiri yoyipa yomwe ingakupangitseni kupita ku foda yopanda pake. Pali ntchito zingapo zomwe mungagwiritse ntchito kuwunika mbiri yanu ya IP…

Kutsimikizika kwa Imelo

Njira zabwino zochepetsera zovuta zilizonse zoyika ma inbox ndikuwonetsetsa kuti mwakhazikitsa ma DNS angapo omwe ma ISPs angagwiritse ntchito kuyang'ana ndikuwonetsetsa kuti maimelo omwe mukutumiza akutumizidwadi ndi inu osati ndi wina amene akunamizira kuti ndi kampani yanu. . Izi zimachitika kudzera munjira zingapo:

  • Ndondomeko Yotumiza Sender (SPF) - muyezo wakale kwambiri pozungulira, apa ndipamene mumalembetsa mbiri ya TXT pakulembetsa kwanu kwa domain (DNS) zomwe zimanena kuti ndi madera kapena ma adilesi a IP omwe mukutumiza imelo kuchokera ku kampani yanu. Mwachitsanzo, ndimatumiza imelo Martech Zone kuchokera Malo Ogwirira Ntchito a Google ndi kuchokera CircuPress (ESP yanga yomwe ili mu beta). Ndili ndi pulogalamu yowonjezera ya SMTP patsamba langa kuti nditumizenso kudzera pa Google, apo ayi ndikanakhala ndi adilesi ya IP yomwe ikuphatikizidwanso.

v=spf1 include:circupressmail.com include:_spf.google.com ~all

  • ankalamulira-Kuchokera ku Mauthentication a Message, Reporting and Conformance (Chithunzi cha DMARC) - Muyezo watsopanowu uli ndi kiyi yobisidwa mmenemo yomwe imatha kutsimikizira madera anga onse komanso wotumiza. Kiyi iliyonse imapangidwa ndi wonditumizira, kuwonetsetsa kuti maimelo omwe amatumizidwa ndi spammer sangasokonezedwe. Ngati mukugwiritsa ntchito Google Workspace, nazi momwe mungakhazikitsire DMARC.
  • DomainKeys Maimelo Odziwika (DKIM) - Kugwira ntchito limodzi ndi mbiri ya DMARC, mbiriyi imadziwitsa a ISPs momwe angachitire ndi malamulo anga a DMARC ndi SPF komanso komwe angatumize malipoti aliwonse operekedwa. Ndikufuna ma ISPs akane mauthenga aliwonse omwe sadutsa DKIM kapena SPF, ndipo ndikufuna kuti atumize malipoti ku imelo imeneyo.

v=DMARC1; p=reject; rua=mailto:dmarc@martech.zone; adkim=r; aspf=s;

  • Zizindikiro Zamtundu Wokuzindikiritsa Mauthenga (BIMI) - Zowonjezera zatsopano, BIMI imapereka njira kwa ma ISPs ndi ma email awo kuti awonetse chizindikiro cha chizindikiro mkati mwa kasitomala wa imelo. Pali zonse zotseguka muyezo komanso mulingo wa encrypted wa Gmail komwe mumafunikiranso satifiketi yobisika. Masatifiketi ndi okwera mtengo kwambiri kotero sindikuchita izi pakadali pano.

v=BIMI1; l=https://martech.zone/logo.svg;a=self;

ZINDIKIRANI: Ngati mukufuna thandizo pakukhazikitsa maimelo anu aliwonse, musazengereze kulumikizana ndi kampani yanga. Highbridge. Tili ndi gulu la kutsatsa kwa imelo ndi akatswiri otumiza zomwe zingathandize.

Momwe Mungatsimikizire Kutsimikizika Kwa Imelo Yanu

Zidziwitso zonse zoyambira, zotumizirana mauthenga, ndi chidziwitso chotsimikizika chokhudzana ndi imelo iliyonse zimapezeka m'mitu ya mauthenga. Ngati ndinu katswiri wothandiza, kutanthauzira izi ndikosavuta… koma ngati ndinu odziwa zambiri, ndizovuta kwambiri. Izi ndi zomwe mutu wauthenga umawonekera m'makalata athu, ndasiya maimelo a autoresponse komanso zambiri za kampeni:

Mutu wa Mauthenga - DKIM ndi SPF

Mukawerenga, mutha kuwona kuti malamulo anga a DKIM ndi ati, kaya DMARC idutsa (siitero) komanso kuti SPF idutsa… koma ndi ntchito yayikulu. Pali njira yabwinoko, komabe, ndiyomwe mungagwiritse ntchito DKIMValidator. DKIMValidator imakupatsirani imelo yomwe mungawonjezere pamndandanda wamakalata anu kapena kutumiza kudzera pa imelo yakuofesi…

Choyamba, imatsimikizira kubisa kwanga kwa DMARC ndi siginecha ya DKIM kuti muwone ngati ikudutsa kapena ayi (satero).

DKIM Information:
DKIM Signature

Message contains this DKIM Signature:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=circupressmail.com;
	s=cpmail; t=1643110423;
	bh=PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=;
	h=Date:To:From:Reply-to:Subject:List-Unsubscribe;
	b=HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=


Signature Information:
v= Version:         1
a= Algorithm:       rsa-sha256
c= Method:          relaxed/relaxed
d= Domain:          circupressmail.com
s= Selector:        cpmail
q= Protocol:        
bh=                 PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=
h= Signed Headers:  Date:To:From:Reply-to:Subject:List-Unsubscribe
b= Data:            HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=
Public Key DNS Lookup

Building DNS Query for cpmail._domainkey.circupressmail.com
Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+D53OskK3EM/9R9TrX0l67Us4wBiErHungTAEu7DEQCz7YlWSDA+zrMGumErsBac70ObfdsCaMspmSco82MZmoXEf9kPmlNiqw99Q6tknblJnY3mpUBxFkEX6l0O8/+1qZSM2d/VJ8nQvCDUNEs/hJEGyta/ps5655ElohkbiawIDAQAB
Validating Signature

result = fail
Details: body has been altered

Kenako, imayang'ana mbiri yanga ya SPF kuti muwone ngati idutsa (imachita):

SPF Information:
Using this information that I obtained from the headers

Helo Address = us1.circupressmail.com
From Address = info@martech.zone
From IP      = 74.207.235.122
SPF Record Lookup

Looking up TXT SPF record for martech.zone
Found the following namesevers for martech.zone: ns57.domaincontrol.com ns58.domaincontrol.com
Retrieved this SPF Record: zone updated 20210630 (TTL = 600)
using authoritative server (ns57.domaincontrol.com) directly for SPF Check
Result: pass (Mechanism 'include:circupressmail.com' matched)

Result code: pass
Local Explanation: martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)
spf_header = Received-SPF: pass (martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)) receiver=ip-172-31-60-105.ec2.internal; identity=mailfrom; envelope-from="info@martech.zone"; helo=us1.circupressmail.com; client-ip=74.207.235.122

Ndipo pomaliza, zimandipatsa chidziwitso pa uthenga womwewo komanso ngati zomwe zilimo zitha kuyika zida zodziwira za SPAM, zimayang'ana kuti muwone ngati ndili pamndandanda wakuda, ndikundiuza ngati ndizovomerezeka kutumizidwa kufoda yopanda kanthu:

SpamAssassin Score: -4.787
Message is NOT marked as spam
Points breakdown: 
-5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                            high trust
                            [74.207.235.122 listed in list.dnswl.org]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                            identical to background
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                            Colors in HTML
 0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid

Onetsetsani kuti mwayesa ESP iliyonse kapena ntchito yotumizirana mameseji ya chipani chachitatu yomwe kampani yanu ikutumizirani imelo kuti muwonetsetse kuti Kutsimikizika kwa Imelo yanu kwakhazikitsidwa bwino!

Yesani Imelo Yanu Ndi DKIM Validator

Kuwulula: Ndikugwiritsa ntchito ulalo wanga wothandizana nawo Malo Ogwirira Ntchito a Google m'nkhaniyi.