From 5fc87c8c04c767b4d0a0200dc8e47e0ef45c1f75 Mon Sep 17 00:00:00 2001 From: Dennis Baaten Date: Mon, 26 Aug 2019 11:27:25 +0200 Subject: [PATCH] Update DMARC-how-to.md --- DMARC-how-to.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/DMARC-how-to.md b/DMARC-how-to.md index 9e04400..cf64403 100644 --- a/DMARC-how-to.md +++ b/DMARC-how-to.md @@ -64,7 +64,7 @@ DMARC for outbound e-mail traffic can be accomplished by publishing a DMARC poli DMARC for inbound e-mail traffic can be accomplished by setting up OpenDMARC and integrate it with Postfix. ### Set up OpenDMARC -Make sure the file **/etc/opendmarc.conf** has a least the following configuration options. +Make sure the file **/etc/opendmarc.conf** has a least the following configuration parameters. AuthservID mail.example.nl PidFile /var/run/opendmarc/opendmarc.pid @@ -78,6 +78,8 @@ Make sure the file **/etc/opendmarc.conf** has a least the following configurati HistoryFile /var/run/opendmarc/opendmarc.dat Socket inet:54321@localhost +For more information about these configuration parameters, take a look at [its man page](https://manpages.debian.org/unstable/opendmarc/opendmarc.conf.5.en.html). + Make sure the file **/etc/opendmarc/ignore.hosts** contains all hosts that you trust. The e-mail coming from these hosts will not be checked by OpenDMARC: 127.0.0.1 @@ -92,7 +94,7 @@ Make sure the default file **/etc/default/opendmarc** contains: PIDFILE=$RUNDIR/opendmarc.pid ### Integrate with Postfix -Now we need to tell Postfix to use OpenDMARC as a mail filter in order to use its functionality. This is done by making sure that **/etc/postfix/main.cf** contains the configuration values as listed below. Notice that the DKIM check (localhost:12301) is done _before_ DMARC (localhost:54321) since DMARC relies on the DKIM results. +Now we need to tell Postfix to use OpenDMARC as a mail filter in order to use its functionality. This is done by making sure that **/etc/postfix/main.cf** contains the configuration parameters as listed below. Notice that the DKIM check (localhost:12301) is done _before_ DMARC (localhost:54321) since DMARC relies on the DKIM results. smtpd_milters = inet:localhost:12301,inet:localhost:54321 non_smtpd_milters = inet:localhost:12301,inet:localhost:54321