DNS opsætning E-mail
Der skal altid oprettes minimum 4 DNS opslag: 1x TXT + 1x SPF + 1x TXT + 1x TXT (se herunder):
- DNS opslag nr. 1: Oprettes som TXT på dcgr.dk domænet:
TXT:
Hostname: pavo.dk._report._dmarc.dcgr.dk.
Text: v=DMARC1
TTL: 3600 - DNS opslag nr. 2: Oprettes som SPF:
SPF:
Hostname: pavo.dk.
SPF-Record: v=spf1 include:spf.protection.dcgr.dk –all
SPF Mechanism: Fail – reject mail from other senders
Additional IP addresses in CIDR format that deliver or relay mail for this domain: n/a
But maybe You know additional IP addresses to put in (earlier mailgateway was one.com – must be in Your DNS, pls. look into that information and update accordingly.
Any domains that may deliver or relay mail for this domain: spf.protection.dcgr.dk
If You know additional domains to put in (earlier mailgateway was one.com – must be in Your DNS, pls. look into that information and update accordingly.
TTL: 3600
I TXT format ser den sådan ud (PS. Kan kun oprettes som et SPF, men editeres som et TXT)
TXT:
Hostname: pavo.dk.
Text: v=spf1 include:spf.protection.dcgr.dk -all
TTL: 3600 - DNS opslag nr. 3: Oprettes som TXT:
TXT:
Hostname: _dmarc.pavo.dk.
Text: v=DMARC1; p=reject; rua=mailto:dmarc-report@dcgr.dk; ruf=mailto:dmarc-report@dcgr.dk; fo=1; sp=reject
TTL: 3600 - DNS opslag nr. 4: Oprettes som TXT (se pkt. 5 for yderligere info omkring dette punkt):
TXT:
Hostname: dkim._domainkey.pavo.dk.
Text: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN6vo9x/J+yNpTrIKNgtYtPb7uMgEwloPtCil8Mx3idvOfsPXl3YR2dLG3RoSpg2YqUN5ltRqeVfuMwDzRs6duBbm2hEFA06ii60R+WiTDDp10BZVO+4UKLmEbwFVDFMc5iOThx9tZclpZyPpO9fAdrBpM214DhVh/XgpIXrz9I2DmzBu67tF0fEo/N5B4lmbUPx3nQvBzQRARaXCypQteGkCTX+TspVQY3krBhemjJQzOcJCctsmJBa5p/iMGfc+1SlJsovcAgMLt/lIygwu2KOVSWG1MX3tmqSy3biNj9U6gQ7cUQXiZ0Wn8A8xcl3HbQy++mTY1iw0mRyh1Y8QwIDAQAB
TTL: 3600 - Tilføjelse af nyt domæne til at benytte DKIM
Åbn C:\Program Files\Exchange DkimSigner\Configuration.DkimSigner.exe på EXCH-01
Tilføj nyt domain under “Domain Settings”
Domain Name: Valgfrit domæne
Selector: dkim
Generer en ny nøgle som opbevares i C:\Program Files\Exchange DkimSigner\keys på EXCH-01
Opret ny domæne på EXCH-02 med samme private key som fra EXCH-01 opret her:
EXCH-02: C:\Program Files\Exchange DkimSigner\Configuration.DkimSigner.exe