From Newsgroup: comp.mail.sendmail
According to <
bp@www.zefox.net>:
The matters of SPF, DKIM and DMARC are where I get lost in the
alphabet soup.
SPF is a DNS record in your DNS zone that says where your mail comes from.
This should do the trick:
examp1e.com. IN TXT "v=spf1 mx ~all"
except use your domain name rather than examp1e.com.
DKIM is a digital signature header added to each outgoing message, and
a DNS record recipients use to check the signature. The usual way to
make that work with sendmail is to install the OpenDKIM package, and
a milter package that connects it to sendmail. The packages have OK documentation and can generate the signing key and the DNS record.
DMARC says whether you have a policy about signing your mail. Since
you don't need one (regardless of what some "experts" say), this will do:
_dmarc.examp1e.com IN TXT "v=DMARC1; p=none;"
I'd be surprised if there weren't cookbooks about how to do this with
sendmail. Here's little script I wrote that installs a working
postfix setup with mailboxes, DKIM, SPF, DMARC, and webmail:
https://github.com/icann/eaiselfhost
FYI, anyone who claims that this authentication stuff is gratuitously
complex has never talked to people who run large mail systems. They
are not dumb, and the malicious traffic they have to deal with is
unbelievable.
--
Regards,
John Levine,
johnl@taugh.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail.
https://jl.ly
--- Synchronet 3.21f-Linux NewsLink 1.2