<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://nurdspace.nl/index.php?action=history&amp;feed=atom&amp;title=Opensmtpd_%26_openbsd</id>
	<title>Opensmtpd &amp; openbsd - Revision history</title>
	<link rel="self" type="application/atom+xml" href="https://nurdspace.nl/index.php?action=history&amp;feed=atom&amp;title=Opensmtpd_%26_openbsd"/>
	<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Opensmtpd_%26_openbsd&amp;action=history"/>
	<updated>2026-04-19T04:40:47Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.39.4</generator>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Opensmtpd_%26_openbsd&amp;diff=14414&amp;oldid=prev</id>
		<title>Rubberduck at 14:23, 1 December 2024</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Opensmtpd_%26_openbsd&amp;diff=14414&amp;oldid=prev"/>
		<updated>2024-12-01T14:23:28Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;a href=&quot;https://nurdspace.nl/index.php?title=Opensmtpd_%26_openbsd&amp;amp;diff=14414&amp;amp;oldid=14413&quot;&gt;Show changes&lt;/a&gt;</summary>
		<author><name>Rubberduck</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Opensmtpd_%26_openbsd&amp;diff=14413&amp;oldid=prev</id>
		<title>Rubberduck: Created page with &quot;{{Project |Name=OpenBSD &amp;Opensmtpd |Skills=Programming, Reading docs |Status=Active |Niche=Infra |Purpose=Communication |Picture=Openbsd.svg |Tool=No |Location=At space |Category=Infra }} Good day,  &#039;&#039;&#039;  &#039;&#039;&#039;First take care of the dns settings:&#039;&#039;&#039;  ;; an A (and AAAA record for IPv6) record is declared to name your mail server  mail.nurdspace.nl  A       217.69.8.253  mail.nurdspace.nl  AAAA    2001:19f0:6801:867:5400:01ff:fee7:7af7    ;; an MX record is declared to let th...&quot;</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Opensmtpd_%26_openbsd&amp;diff=14413&amp;oldid=prev"/>
		<updated>2024-12-01T11:09:40Z</updated>

		<summary type="html">&lt;p&gt;Created page with &amp;quot;{{Project |Name=OpenBSD &amp;amp;Opensmtpd |Skills=Programming, Reading docs |Status=Active |Niche=Infra |Purpose=Communication |Picture=Openbsd.svg |Tool=No |Location=At space |Category=Infra }} Good day,  &amp;#039;&amp;#039;&amp;#039;  &amp;#039;&amp;#039;&amp;#039;First take care of the dns settings:&amp;#039;&amp;#039;&amp;#039;  ;; an A (and AAAA record for IPv6) record is declared to name your mail server  mail.nurdspace.nl  A       217.69.8.253  mail.nurdspace.nl  AAAA    2001:19f0:6801:867:5400:01ff:fee7:7af7    ;; an MX record is declared to let th...&amp;quot;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;{{Project&lt;br /&gt;
|Name=OpenBSD &amp;amp;Opensmtpd&lt;br /&gt;
|Skills=Programming, Reading docs&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Infra&lt;br /&gt;
|Purpose=Communication&lt;br /&gt;
|Picture=Openbsd.svg&lt;br /&gt;
|Tool=No&lt;br /&gt;
|Location=At space&lt;br /&gt;
|Category=Infra&lt;br /&gt;
}}&lt;br /&gt;
Good day,&lt;br /&gt;
&amp;#039;&amp;#039;&amp;#039;&lt;br /&gt;
&amp;#039;&amp;#039;&amp;#039;First take care of the dns settings:&amp;#039;&amp;#039;&amp;#039;&lt;br /&gt;
;; an A (and AAAA record for IPv6) record is declared to name your mail server&lt;br /&gt;
mail.nurdspace.nl  A       217.69.8.253&lt;br /&gt;
mail.nurdspace.nl  AAAA    2001:19f0:6801:867:5400:01ff:fee7:7af7&lt;br /&gt;
&lt;br /&gt;
;; an MX record is declared to let the world know that mail.nurdspace.nl handles mail for nurdspace.nl&lt;br /&gt;
;; 0 is the highest preference, if we had a backup MX we&amp;#039;d set a higher number on it,&lt;br /&gt;
;; let&amp;#039;s keep that for later, shall we ?&lt;br /&gt;
&lt;br /&gt;
nurdspace.nl.      MX 0    mail.nurdspace.nl.&lt;br /&gt;
;;nurdspace.nl.    MX 10   mail-backup.nurdspace.nl. &amp;lt;- that is a backup mx record.&lt;br /&gt;
some vps providers use a different dns interface: use then @ insteat nurdspace.nl.      MX 0    mail.nurdspace.nl. &lt;br /&gt;
&lt;br /&gt;
example from transip.nl:&lt;br /&gt;
@ mx 0 mail&lt;br /&gt;
they fill automagisch your domainname in.&lt;br /&gt;
&lt;br /&gt;
second step is check the dns setting &lt;br /&gt;
use command host mail.nurdspace.nl.&lt;br /&gt;
you get if everyting is good the reply mail.nurdspace.nl has address 1.1.1.1&lt;br /&gt;
and if yoy config ipv6 you get a ipv6 reply.&lt;br /&gt;
then use dig -t mx nurdspace.nl +short&lt;br /&gt;
you get if everyting is good the reply 0 mail.nurdspace.nl.&lt;br /&gt;
also the reverse dns must also right config &lt;br /&gt;
check host 1.1.1.1 the answer you should expect is: 1.1.1.1.in-addr.arpa domain name pointer mail.nurdspace.nl.&lt;br /&gt;
&lt;br /&gt;
&amp;#039;&amp;#039;&amp;#039;the third step is:&amp;#039;&amp;#039;&amp;#039;&lt;br /&gt;
makeing spf working.&lt;br /&gt;
add the next record to your dns server: nurdspace.nl.	IN	TXT	v=spf1 mx -all&lt;br /&gt;
&lt;br /&gt;
create a directory to hold the keys:&lt;br /&gt;
# mkdir /etc/mail/dkim&lt;br /&gt;
Then, the following commands will generate the keypair and extract the public key out of the private key:&lt;br /&gt;
# openssl genrsa -out /etc/mail/dkim/nurdspace.nl.key 1024                                       &lt;br /&gt;
Generating RSA private key, 1024 bit long modulus&lt;br /&gt;
..............................++++++&lt;br /&gt;
...............++++++&lt;br /&gt;
e is 65537 (0x10001)&lt;br /&gt;
&lt;br /&gt;
# openssl rsa -in /etc/mail/dkim/nurdspace.nl.key -pubout -out /etc/mail/dkim/nurdspace.nl.pub &lt;br /&gt;
writing RSA key&lt;br /&gt;
&lt;br /&gt;
# cat /etc/mail/dkim/nurdspace.nl.pub                                                                 &lt;br /&gt;
-----BEGIN PUBLIC KEY-----&lt;br /&gt;
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDThHqiM610nwN1nmV8OMc7PaPO&lt;br /&gt;
uJWVGRDz5bWj4cRjTTmQYjJQd02xrydRNrRhjEKBm2mMDArNWjoM3jvN04ZifqJx&lt;br /&gt;
DmKr7X8jsYi+MPEHz6wZxB8mayDK6glYTCyx//zl1luUdvm26PutA38K8cgnb7iT&lt;br /&gt;
kfVP2OqK6sHAdXjnowIDAQAB&lt;br /&gt;
-----END PUBLIC KEY-----&lt;br /&gt;
&lt;br /&gt;
Finally, I can create the DNS TXT record by extracting the public key out of the armor delimiters and formatting the content so it displays as follows:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;selector&amp;gt;._domainkey.nurdspace.nl.	IN TXT &amp;quot;v=DKIM1;k=rsa;p=the publickey just generated ;&amp;quot;&lt;br /&gt;
&lt;br /&gt;
The name of the record should be constructed using this pattern: &amp;lt;selector&amp;gt;._domainkey.&amp;lt;domain&amp;gt;., where &amp;lt;selector&amp;gt; is a name you chose and which allows multiple keys to coexist.&lt;br /&gt;
&amp;#039;&amp;#039;&amp;#039;next step:&amp;#039;&amp;#039;&amp;#039;&lt;br /&gt;
Create a dmarc record in your dns server:&lt;br /&gt;
_dmarc.hypno.cat.   IN TXT    &amp;quot;v=DMARC1;p=none;pct=100;rua=mailto:postmaster@nurdspace.nl;&amp;quot;&lt;br /&gt;
&lt;br /&gt;
The format of DMARC records goes beyond this article and you’ll find multiple examples in any search engine, but a very simple record will simply state a policy (p=) of none (reject if you want to be harsh, quarantine if you need more time to decide). The percentage field (pct=) declares how many of these mails should be subjected to the DMARC policy,&lt;br /&gt;
and the Reporting URI of Aggregated field (rua=) is where you should receive DMARC reports should you want to analyze them (before switching from quarantine to reject for example)&lt;/div&gt;</summary>
		<author><name>Rubberduck</name></author>
	</entry>
</feed>