Difference between revisions of "Opendmarc setup"

From HyperSecurity Wiki
Jump to: navigation, search
(Created page with "== DNS Settings == Append the following to any DNS zone file record: _dmarc.domain.com. 3600 IN TXT "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:postmaster@dom...")
 
 
Line 2: Line 2:
 
Append the following to any DNS zone file record:
 
Append the following to any DNS zone file record:
 
  _dmarc.domain.com. 3600 IN TXT "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:postmaster@domain.com; ruf=mailto:postmaster@misoswap.exchange; rf=afrf; pct=100; ri=86400"
 
  _dmarc.domain.com. 3600 IN TXT "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:postmaster@domain.com; ruf=mailto:postmaster@misoswap.exchange; rf=afrf; pct=100; ri=86400"
 
  
 
== Init Script ==
 
== Init Script ==
Line 8: Line 7:
 
  rm -rf /var/spool/postfix/var/run/opendmarc/*
 
  rm -rf /var/spool/postfix/var/run/opendmarc/*
 
  /usr/sbin/opendmarc -p local:/var/spool/postfix/var/run/opendmarc/opendmarc.sock -c /etc/opendmarc.conf -u opendmarc -P /var/spool/postfix/var/run/opendmarc/opendmarc.pid
 
  /usr/sbin/opendmarc -p local:/var/spool/postfix/var/run/opendmarc/opendmarc.sock -c /etc/opendmarc.conf -u opendmarc -P /var/spool/postfix/var/run/opendmarc/opendmarc.pid
 
  
 
== Files ==
 
== Files ==

Latest revision as of 05:47, 31 May 2021

DNS Settings

Append the following to any DNS zone file record:

_dmarc.domain.com. 3600 IN TXT "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:postmaster@domain.com; ruf=mailto:postmaster@misoswap.exchange; rf=afrf; pct=100; ri=86400"

Init Script

#!/bin/sh
rm -rf /var/spool/postfix/var/run/opendmarc/*
/usr/sbin/opendmarc -p local:/var/spool/postfix/var/run/opendmarc/opendmarc.sock -c /etc/opendmarc.conf -u opendmarc -P /var/spool/postfix/var/run/opendmarc/opendmarc.pid

Files

/etc/opendmarc.conf
/etc/opendmarc/ignore.hosts

Config files

/etc/opendmarc.conf

FailureReports true
PidFile /var/spool/postfix/var/run/opendmarc/opendmarc.pid
RejectFailures true
Socket local:/var/spool/postfix/var/run/opendmarc/opendmarc.sock
Syslog true
UMask 0002
UserID opendmarc:opendmarc
PublicSuffixList /usr/share/publicsuffix/
IgnoreAuthenticatedClients true
IgnoreHosts /etc/opendmarc/ignore.hosts

/etc/opendmarc/ignore.hosts

localhost
127.0.0.0/8
23.95.173.121

Confirm the following group:

opendmarc:opendmarc

If not found, then run the following:

useradd opendmarc

Confirm the following is write/read for opendmarc

/var/spool/postfix/var/run/opendmarc/

If not, then run the following as root:

mkdir -p /var/spool/postfix/var/run/opendmarc/
chmod -R opendmarc.postfix /var/spool/postfix/var/run/opendmarc/