I-DNS ye-imeyili: amarekhodi, ukusetha kanye nokutholakala kalula

Ikhaya » Python » I-DNS ye-imeyili: amarekhodi, ukusetha kanye nokutholakala kalula

I-imeyili incike kakhulu ku-DNS kunokuba abantu abaningi beqaphela. Njalo uma ucindezela u-Thumela, uchungechunge lonke lokusesha i-DNS lunquma buthule ukuthi umlayezo wakho ufika ebhokisini lokungenayo, ufika kugaxekile, noma uvinjelwa ngokuphelele. Uma i-DNS yakho ye-imeyili ingalungiselelwanga kahle, ngisho nomkhankaso ongcono kakhulu noma umlayezo wokuthengiselana obaluleke kakhulu unganyamalala kalula.

Uma i-DNS izwakala iyimfihlakalo noma inobuchwepheshe obukhulu, awuwedwa. Ochwepheshe abaningi be-IT abanolwazi basacabanga ukuthi ukusingathwa kwewebhusayithi kanye ne-imeyili kumele kuhlale kuseva efanayo, lapho i-DNS ikuvumela ukuthi uhlukanise izinsizakalo nganoma iyiphi indlela oyithandayo. Izindaba ezinhle: uma usuqonda amarekhodi e-DNS ayinhloko e-imeyili—i-MX, i-SPF, i-DKIM, i-DMARC, kanye nezinye ezimbalwa—ungakha ukusethwa kwe-imeyili okuqinile, okuphephile, nokulethwayo okuphezulu okuziqhuba kakhulu.

Iyini i-DNS nokuthi kungani ibalulekile nge-imeyili

I-DNS (Domain Name System) yincwadi yamakheli ye-inthanethiAbantu bathanda amagama anjengokuthi yourcompany.com, kodwa amakhompyutha akhuluma esebenzisa amakheli e-IP afana nalawa 203.0.113.10 or 2001: db8 :: 1I-DNS iguqula isizinda sibe yilawo makheli ezinombolo ukuze iziphequluli, izinhlelo zokusebenza, kanye namaseva emeyili azi ukuthi kufanele axhumane kuphi.

Uma uthayipha isizinda kusiphequluli, ukubheka i-DNS kuqala uhambo oluncaneIdivayisi yakho ibuza isixazululo esiphindaphindayo (ngokuvamile iqhutshwa yi-ISP yakho noma i-DNS yomphakathi efana ne-Google noma i-Cloudflare), okungenzeka ukuthi impendulo isivele igciniwe. Uma kungenjalo, i-resolver ihamba ngochungechunge lwamaseva: i i-root nameserver, ngakho-ke iseva yegama le-TLD (ye-.com, .net, .org, njll.), futhi ekugcineni iseva yegama eligunyaziwe yaleyo domain ethile. Leyo seva yokugcina igcina amarekhodi e-DNS atshela i-inthanethi ukuthi ingaphatha kanjani ithrafikhi yesizinda.

Kwenzeka into efanayo uma kuhileleke i-imeyiliUkuthumela amaseva kubuza i-DNS ukuthola izinto ezintathu ezinkulu: ukuthi kufanele ithunyelwe kuphi i-imeyili yesizinda, ukuthi yimaphi amaseva avunyelwe ukuthumela kusuka kuleso sizinda, nokuthi ngabe imilayezo iyiqiniso noma iqanjiwe. Uma lawo marekhodi e-DNS engekho, engalungile, noma engaphelele, uzobona imilayezo ebhajwe, ukubekwa kwefolda yogaxekile, noma idumela lomthumeli elonakele.

Indlela i-imeyili ehamba ngayo nge-DNS

I-imeyili ngayinye ephumayo iqala okungenani ukubheka i-DNS eyodwaUma othile ethumela umlayezo ku- user@yourcompany.com, iseva yeposi ethumelayo ibuza i-DNS: “Yisiphi iseva esiphatha iposi yalesi sizinda?” Iyayifuna Amarekhodi e-MX kuqala. Uma zikhona, zikhomba amagama esizinda samaseva eposi atholayo. Uma amarekhodi e-MX engekho, izinhlelo eziningi zibuyela emuva kusizinda. Irekhodi le-A noma le-AAAA, kodwa lokho akukhuthazwa ekusethweni kobungcweti.

Ukulethwa kanye nokuphepha kudinga okungaphezu nje kokwazi ukuthi kufanele uthumele kuphi iposiAmaseva okwamukela esimanje nawo abuza nge-DNS ye- SPF (Uhlaka Lwenqubomgomo Yomthumeli), I-DKIM (DomainKeys Identified Mail), futhi ngokuzithandela I-DMARC (Ukuqinisekiswa Komyalezo Osekelwe Esizindeni, Ukubika Nokuhambisana). La marekhodi atshela umamukeli ukuthi umyalezo uvela emthonjeni ogunyaziwe ngempela nokuthi angaphathwa kanjani imiyalezo esolisayo.

Ekusithekeni, izinhlobo eziningana ezahlukene zeseva ziyasebenzisana ukuhambisa imiyalezoIposi eliphumayo livame ukuhamba nge- Iseva ye-SMTP (I-Simple Mail Transfer Protocol), esebenza ne-Mail Transfer Agent (MTA) ukuze idlulisele umlayezo ku-inthanethi. Ngasohlangothini lokwamukela, abasebenzisi balanda i-imeyili besebenzisa noma iyiphi I-POP3 (okuvame ukulanda nokususa i-imeyili kuseva) noma I-IMAP (okugcina imiyalezo kuseva futhi kuvumelaniswa kuwo wonke amadivayisi). Zonke lezi zingxenye zithembele kumarekhodi e-DNS ukuze zazi ukuthi yimaphi amagama okusingatha kanye nama-IP okufanele uwaxhumane.

Izinhlobo zamarekhodi e-DNS ezibalulekile okufanele uzazi nge-imeyili

Akuwona wonke amarekhodi e-DNS athinta i-imeyili ngqo, kodwa ambalwa abaluleke kakhulu yokuhambisa, ukuqinisekisa, kanye nokuhlunga ogaxekile. Ezinye zidlala indima esekelayo ekuthembekeni nasekuthembekeni.

Amarekhodi e-A kanye ne-AAAA: ukumaka isizinda sakho kumakheli e-IP

Irekhodi le-A lixhumanisa isizinda nekheli le-IPv4 (Ngokwesibonelo, 93.184.216.34). Ngaphandle kwerekhodi elilodwa le-A elisebenzayo okungenani, isizinda sakho asitholakali ku-inthanethi. Izinsizakalo eziningi nazo zithembele kuso uma irekhodi le-MX lingekho noma lingalungiselelwanga kahle—into ofuna ukuyigwema ngokushicilela amarekhodi e-MX afanele.

Irekhodi le-AAAA liyi-IPv6 efanayo nerekhodi le-A. Ihlanganisa isizinda nekheli le-IPv6, okuyinto ebaluleke kakhulu njengoba isikhala se-IPv4 siphela. Nakuba u-A no-AAAA bengachazi ukuthi kufanele kuthunyelwe kuphi iposi, bahlanganisa isizinda sakho nengqalasizinda yangempela futhi bangasetshenziswa ekubuyiseleni iposi uma amarekhodi e-MX engekho.

Amarekhodi e-MX: ukutshela umhlaba ukuthi uhambise kuphi iposi

Amarekhodi e-MX (Mail Exchange) ayitshe lesisekelo le-DNS le-imeyili. Bamemezela ukuthi yimaphi amaseva amukela imiyalezo engenayo yesizinda sakho. Irekhodi ngalinye le-MX liqukethe kuqala (inombolo lapho okuphansi kukhethwa kakhulu) kanye nenombolo igama lomkhosi (hhayi i-IP eluhlaza) yeseva yemeyili. Amaseva atholayo ahlela amarekhodi e-MX ngokubaluleka kwawo bese ewazama ngokulandelana, ekunikeza ukuphindaphinda okwakhelwe ngaphakathi.

Isizinda singasebenzisa irekhodi elilodwa le-MX, kodwa amarekhodi amaningi anconywa kakhulu ukuze kuqinisekiswe ukuqina. Izixazululo eziningi ze-imeyili ezisingathiwe, njenge-Microsoft 365 noma i-Google Workspace, zinikeza inani elilodwa eliyinhloko le-MX, kodwa ingqalasizinda enkulu ivame ukushicilela okufakiwe kwe-MX okuningana okunezidingo ezihlukile ukuze uma iseva eyodwa ingasebenzi, enye ingakwazi ukwamukela iposi.

Uma ulungiselela amarekhodi e-MX, umhlinzeki wakho we-DNS ngeke asungule amanani. I-host yakho ye-imeyili ikunikeza amagama aqondile okusingatha, izinto eziza kuqala, kanye nanoma yiziphi izidingo ezikhethekile. Kuphaneli yakho yokulawula ye-DNS uvame ukusetha: i-host noma igama (ngokuvamile @ yesizinda sempande), inombolo ebalulekile, igama lomphathi weseva yeposi (njenge smtp.provider.com), kanye ne-TTL (isikhathi sokuphila), elawula ukugcinwa kwesikhashana.

Amarekhodi e-TXT: isitsha sokuphepha kwe-imeyili yesimanje

Amarekhodi e-TXT agcina umbhalo ongahleliwe onamathiselwe kusizinda sakhoIzinhlelo ze-imeyili ziwasebenzisa kakhulu ezinqubomgomo kanye nedatha yokuqinisekisa. I-SPF kanye ne-DMARC zihlala ngaphakathi kwamarekhodi e-TXT, futhi i-DKIM ivame ukwenza okufanayo (yize abanye abahlinzeki beveza i-DKIM nge-CNAME esikhundleni salokho).

Ngenxa yokuthi amarekhodi e-TXT angagcina noma yini, asetshenziselwa nokuhlola ubunikazi besizinda. (isibonelo ngama-ESP, amasevisi ewebhu, noma abahlinzeki be-SSL), kanye nezici ezithuthukisiwe njengeziqondiso zokubethela ezisebenzisa amathuba kanye nezinkomba zomkhiqizo we-BIMI. Kubathumeli be-imeyili, izindlela ezintathu ezibalulekile ezisekelwe ku-TXT yi-SPF, i-DKIM, kanye ne-DMARC.

I-SPF: ukugunyaza amaseva angathumela i-imeyili yesizinda sakho

I-SPF iwuhlaka lokuqinisekisa i-imeyili oluphendula umbuzo owodwa: “Ingabe le IP noma iseva ivunyelwe ukuthumela iposi isebenzisa lesi sizinda kukheli elithi Ukusuka?” Ushicilela inqubomgomo yakho njengerekhodi le-TXT elivame ukuqala ngo v=spf1 futhi iphetha ngesichazi-magama esifana nokuthi -konke, ~konke, noma ?konke.

Inqubomgomo elula ye-SPF ingavumela iposi kuphela evela kubabungazi be-MX besizinda sakhoIsibonelo sibukeka kanje: “v=spf1 mx -konke”. Lowo mugqa utshela abamukeli ukuthi bamukele iposi elivela kuma-IP asetshenziswa amarekhodi akho e-MX futhi baphathe yonke eminye imithombo njengengagunyaziwe. Uma uthumela futhi ngamathuluzi e-newsletter, ama-CRM, noma izinsizakalo zamafu, wandisa inqubomgomo nge Faka izitatimende zesizinda se-SPF somhlinzeki ngamunye.

Izinqubomgomo ze-SPF ezijwayelekile zezinsizakalo eziningi zixhumanisa izinto eziningana zibe yirekhodi elilodwaIsibonelo, uma uthumela kusuka kumhlinzeki wakho oyinhloko kanye neplatifomu yosizo kanye nensizakalo ye-imeyili yokuthengiselana, ungagcina unezinto ezifana nalezi: v=spf1 a mx include:service1.com include:service2.com ~konkeAmapulatifomu akho e-imeyili ngokuvamile azokunikeza izintambo kanye ne-syntax eqondile okufanele uyifake.

Kubalulekile ukugcina irekhodi elilodwa le-SPF TXT ngesizinda ngasinye. Ukubeka amarekhodi amaningi e-SPF egameni elifanayo le-DNS kungaphula ukuqinisekiswa. Esikhundleni salokho, hlanganisa zonke izindlela ezidingekayo zibe yinqubomgomo eyodwa ephethwe ngokucophelela, bese uyibuyekeza noma nini lapho ungeza noma ususa izinsizakalo zokuthumela.

I-DKIM: ukusayina imiyalezo ngeminwe ye-cryptographic

I-DKIM (DomainKeys Identified Mail) inikeza isiginesha esibonakala sengathi siphazamisekile kumilayezo ephumayo. Uhlelo lwakho lokuthumela lusebenzisa ukhiye we-cryptographic oyimfihlo ukudala i-hash esekelwe kuma-header athile futhi ngezinye izikhathi umzimba womlayezo. Lesi siginesha siya ensimini ye-header ye-imeyili ekhethekile.

Ukhiye womphakathi ohambisanayo uhlala ku-DNSIsikhethi se-DKIM (ilebula encane efana imeyili or mlsend2) kanye nesizinda sakha igama lomphathi werekhodi lokhiye womphakathi, ngokuvamile into efana naleyo i-selector._domainkey.yourcompany.comUma uhlelo lokwamukela luthola i-imeyili, lubheka i-DKIM header, lubuze i-DNS yalowo okhethayo, lulande ukhiye womphakathi, bese luhlola ukuthi isiginesha siyasebenza yini nokuthi okuqukethwe akushintshwanga.

I-DKIM ingashicilelwa njengerekhodi le-TXT noma le-CNAMEAbahlinzeki abaningi bakunikeza inani elikhulu le-TXT eliqala ngo v=DKIM1 kanye ne-long p= insimu equkethe ukhiye womphakathi obhalwe nge-base64. Abanye bakucela ukuthi udale i-CNAME ekhomba kusuka ku-hostname yakho yokukhetha kuya kuleyo abayisingathayo, ebavumela ukuthi bajikeleze okhiye phakathi nendawo ngaphandle kokuthi uhlele i-DNS njalo.

Isizinda ngasinye sokuthumela ngokuvamile sinesikhethi se-DKIM esisodwa okungenani, futhi izinsizakalo ezahlukene zingasebenzisa ezazo. Kulungile lokho; ungaba namarekhodi amaningi e-DKIM inqobo nje uma abakhethi bawo behlukile. Abahlinzeki bakho be-imeyili bazokukhombisa ngqo ukuthi yini okufanele uyengeze, futhi ukusetshenziswa kuvame ukukopisha nokunamathisela kuphaneli yakho ye-DNS.

I-DMARC: ukuhlanganisa i-SPF ne-DKIM nenqubomgomo

I-DMARC (Ukuqinisekiswa Komyalezo Osuselwe Esizindani, Ukubika Nokuhambisana) iphezu kwe-SPF ne-DKIM. Ayiqinisekisi imiyalezo ngokuqondile; kunalokho, ihlola ukuthi iyadlula yini i-SPF kanye/noma i-DKIM nokuthi leyo miphumela ihambisana yini nesizinda esibonakalayo esivela ku-Kusuka. Bese isebenzisa inqubomgomo oyichazayo ukusho ukuthi kufanele kwenzekeni uma ukuhlola kwehluleka.

Inqubomgomo ye-DMARC ihlala kurekhodi le-TXT kugama lomethuleli elikhethekile _dmarc.yourcompany.comIrekhodi liqala ngo- v=DMARC1 futhi kufaka phakathi amathegi afana nalawa p= (inqubomgomo: akukho, ukuhlukaniswa, noma ukwenqaba) kanye nezinketho zokubika amakheli. Nge-DMARC ungayala abamukeli ukuthi baqaphele nje (akukho ukuphoqelelwa), bathumele ukwehluleka kugaxekile, noma bawavimbele ngokuphelele.

Izici zokubika ze-DMARC ziyigugu elifihliwe lokuphepha kanye nokulethwa kalulaNgokucacisa amakheli ku- umgwaqo futhi ruf Amathegi, ucela abahlinzeki abamukelayo ukuthi bakuthumelele imibiko ehlanganisiwe noma ye-forensic mayelana nemiphumela yokuqinisekisa. Le mibiko ikusiza ukuthi uthole abathumeli abangagunyaziwe, izinsizakalo ezingalungiselelwe kahle, noma izizinda ezisetshenziswa kabi ngobugebengu bokweba imininingwane ebucayi.

Amanye amarekhodi e-DNS athinta i-imeyili

Ngale kwe-MX, i-SPF, i-DKIM, kanye ne-DMARC, kunezinhlobo ezimbalwa zamarekhodi e-DNS ezithinta ukuthi i-imeyili yakho iyathenjwa futhi ithunyelwe ngempumelelo yini.. Kungase kungadingeki kakhulu, kodwa kuvame ukuvela ezinhlokweni zokuhlola zokulethwa kanye ne-logic yokulwa nogaxekile.

I-PTR (i-DNS engemuva): ukuqinisekisa i-IP ethumelayo

Irekhodi le-PTR lenza okuphambene nokuhlolwa kwe-DNS okuvamileEsikhundleni sokuhlela igama lesizinda ekhelini le-IP, lihlela ikheli le-IP libuyele kugama lomethuleli. Lokhu kuhlela okuphambene kubizwa ngokuthi i-DNS ebuyela emuva noma i-rDNS.

Amaseva e-imeyili atholayo ahlola njalo i-DNS ebuyela emuva ye-IP ethumelayoUma kungekho rekhodi le-PTR, noma igama le-host elilibuyisayo lingahambisani kahle nesizinda esiku-imeyili, abanye abahlinzeki baphatha umlayezo njengosolisayo. Lokho kungabangela amaphutha anjengokuthi “I-Reverse DNS yehlulekile” noma kubangele ukuthi i-imeyili yenqatshwe ngamakhodi abhekisela ku-PTR engekho.

Empeleni, awuvamile ukuphatha amarekhodi e-PTR endaweni yakho evamile ye-DNS. Zilawulwa yinoma ubani ongumnikazi webanga le-IP—ngokuvamile i-ISP yakho, umhlinzeki we-hosting, noma ipulatifomu ye-imeyili. Kumaseva eposi azinikele, uvame ukucela ukuthi umhlinzeki asethe i-PTR ekhomba igama lakho lomethuleli olikhethile, bese uqinisekisa ukuthi igama lomethuleli linerekhodi elifanayo le-A noma le-AAAA.

I-SRV, i-NS, kanye ne-SOA: ukusekela ingqalasizinda yokulethwa okuqhubekayo

Amarekhodi e-SRV (Service) achaza umsingathi kanye nembobo yephrothokholi ethile. Nge-imeyili, bangakhomba amaklayenti kumaseva nama-port afanele e-SMTP, IMAP, noma i-POP. Nakuba bengalawuli ukulethwa ngqo, amarekhodi e-SRV asiza amathuluzi okucushwa okuzenzakalelayo ukuthola ama-endpoint afanele.

Amarekhodi e-NS (Name Server) achaza ukuthi yimaphi amaseva e-name anegunya lesizinda sakho. Lawa maseva agcina futhi aphendule ngedatha yakho ye-DNS. Uma amarekhodi e-NS engalungile, ukungahambisani phakathi kwabahlinzeki be-DNS kungaholela ekuziphatheni kweposi okungalindelekile, njengoba abanye abathumeli bangase babone amarekhodi aphelelwe yisikhathi noma angaphelele.

Irekhodi le-SOA (Start of Authority) likhomba iseva yegama eliyinhloko ye-zone futhi inikeza imininingwane efana nenombolo ye-serial yefayela le-zone kanye namanani esikhathi asetshenziselwa ukugcina isikhashana nokuvuselela. Ayilawuli i-logic ye-imeyili ngqo, kodwa ukucushwa kwe-SOA okufanele kubalulekile ekuphindaphindweni okuthembekile kanye nokusakazwa kwezinguquko zakho ezihlobene ne-imeyili.

I-BIMI ne-TLSA: izimpawu zokuthembela ezithuthukisiwe kanye nokubethela

I-BIMI (Izinkomba Zomkhiqizo Zokuhlonza Umlayezo) ikuvumela ukuthi ubonise ilogo yakho emabhokisini okungenayo ahambisanayo. Ngobuchwepheshe, isebenzisa irekhodi le-TXT elikhomba isithombe se-SVG selogo yakho futhi, ezimweni eziningi, kuncike ezitifiketini zomkhiqizo eziqinisekisiwe kanye nenqubomgomo ye-DMARC eqinisiwe. Nakuba i-BIMI ngokwayo ingeke ilungise izinkinga zokulethwa, iyisignali yokuthembana ebonakalayo futhi ingathuthukisa ukuzibandakanya uma ukuqinisekiswa kwakho sekuvele kuqinile.

Amarekhodi e-TLSA asekela i-DANE (Ukuqinisekiswa Kwamabhizinisi Aqanjwe Ngegama Okusekelwe ku-DNS), okubopha izitifiketi ze-TLS kumagama e-DNS nge-DNSSEC. Ku-imeyili, i-TLSA ingaqinisa ukuxhumana kwe-STARTTLS phakathi kwamaseva emeyili ngokucacisa ukuthi yiziphi izitifiketi ezivumelekile. Lokhu kusiza ukuvimbela ukuhlaselwa kwe-man-in-the-middle ku-SMTP, yize empeleni kudinga i-DNSSEC futhi kusavamile kakhulu kune-SPF/DKIM/DMARC.

Ukulungiselela i-DNS yomhlinzeki wakho we-imeyili

Iningi lokuphakamisa okunzima kwenziwa ngumgcini we-imeyili yakho, okunikeza okufakiwe kwe-DNS okuqondile okumele ukufake. Umsebenzi wakho ukukopisha lawo manani ezinhlotsheni ezifanele zamarekhodi ku-registrar yesizinda sakho noma ku-DNS host bese uhlola kabili amaphutha okubhala.

Isinyathelo ngesinyathelo: ukwengeza nokuqinisekisa amarekhodi e-MX

Ukuze uqondise i-imeyili yesizinda sakho kumhlinzeki othile, qala ngamarekhodi e-MXNgemva kokubhalisela i-imeyili ephethwe noma ipulatifomu yamafu, bheka amadokhumenti abo ku-“izilungiselelo ze-DNS” noma “amarekhodi e-mail exchanger.” Bazobhala uhlu lwamagama abathumeli kanye nezinto eziza kuqala okumele uzisebenzise.

Ku-console yakho yokuphatha i-DNS, thola inketho yokwengeza irekhodi elisha bese ukhetha uhlobo MX. Kumphathi noma igama, izizinda zivame ukusebenzisa @ ukumela impande (isibonelo, yourcompany.com). Namathisela igama lomphathi weseva yemeyili njengenani, setha okubalulekile okudingayo, gcina i-TTL ezenzakalelayo ngaphandle kokuthi welulekwe ngenye indlela, bese ulondoloza. Phinda noma yimaphi amarekhodi e-MX engeziwe abawanikezayo.

Uma amarekhodi e-MX esegciniwe, kuzoba nesikhathi sokusabalala. Ama-cache e-DNS aku-inthanethi adinga isikhathi sokuphelelwa yisikhathi kwedatha endala. Lindela noma kuphi kusukela emizuzwini embalwa kuya emahoreni amaningana—ngezinye izikhathi kuze kube amahora angu-24-48—ukuze umzila omusha wemeyili ubonakale yonke indawo. Phakathi naleli windi, abanye abathumeli bangase bahambise endaweni endala.

Ukushicilela i-SPF ku-DNS yakho

Ngemva kokuthi ukuthunyelwa kweposi sekusethiwe, shicilela i-SPF ukuze umemezele ukuthi ubani ovunyelwe ukuthumela egameni lesizinda sakhoInsizakalo yakho eyinhloko ye-imeyili, ipulatifomu yokumaketha, kanye nanoma yiziphi izinhlelo zokuthengiselana kufanele zonke zimelelwe kurekhodi elilodwa le-SPF TXT.

Iningi labahlinzeki likukhombisa ingxenye eqondile ye-SPF oyidingayoIsibonelo, ipulatifomu yokuthumela ingase ithi: “Engeza irekhodi le-TXT elinegama @ kanye nenani v=spf1 faka:_spf.example.com ~konke.” Uma usuvele unerekhodi le-SPF, hlanganisa i-include entsha kulo kunokudala irekhodi lesibili ngegama elifanayo.

Ukukhetha phakathi kuka--all kanye no-~all kuthinta indlela abamukeli abaphatha ngayo ukwehluleka. Ukwehluleka okunzima (-konke) ithi noma yimuphi umthombo wokuthumela ongafakwanga ohlwini olucacile kufanele wenqatshwe, kuyilapho ukwehluleka okuthambile (~konke) ngokuvamile ivumela imiyalezo ukuthi idlule kodwa ingase iyimake njengogaxekile. Izinhlangano eziningi ziqala ngokuhluleka okuthambile ngenkathi zihlola zonke izinhlelo zazo zokuthumela, bese ziqhubekela ezinqubweni eziqinile ngokuhamba kwesikhathi.

Ukungeza okhiye be-DKIM abavela kubahlinzeki bakho

Ukusethwa kwe-DKIM kuvame ukuba lula uma usuthole isikrini esifanele kudeshibhodi yomhlinzeki wakho. Bheka izingxenye ezibhalwe ukuthi “ukuqinisekiswa kwesizinda,” “i-DKIM,” noma “ukusayina nge-imeyili.” Uzobona isikhethi esisodwa noma ngaphezulu kanye namanani e-TXT noma ama-targets e-CNAME.

Uma umhlinzeki wakho enikeza irekhodi le-TXT, dala ukungena kwe-DNS ku-hostname yokukhetha (Ngokwesibonelo, i-selector._domainkey.yourcompany.com) bese unamathisela intambo ende ye-DKIM abayinikezayo. Uma becela i-CNAME esikhundleni salokho, uzokhomba igama lakho lomethuleli kwelabo, utshele umhlaba ukuthi ulande ukhiye ngqo ku-DNS yomhlinzeki wakho.

Izinsizakalo eziningi zidinga ukuthi uchofoze inkinobho ethi “Qinisekisa” noma ethi “Hlola i-DNS” ngemva kokufaka i-DKIM. Lokhu kubangela ukufunwa ohlangothini lwabo; uma sebebone ukhiye ofanele, bazoqala ukusayina i-imeyili ephumayo. Kuze kube yilapho lokho kuqinisekiswa kudlula, imiyalezo ingathunyelwa ngaphandle kwe-DKIM, okwenza indaba yakho yokuqinisekisa ibe buthaka.

Ukukhipha izinqubomgomo ze-DMARC ngokuphephile

Ukufakwa kwe-DMARC kwenziwa kangcono ngezigabaQala ngenqubomgomo ye none, ecela abamukeli ukuthi babike ngokwehluleka kodwa bangavimbi lutho. Lokhu kukuvumela ukuthi ubone ukuthi ubani othumela egameni lesizinda sakho nokuthi ngabe i-SPF ne-DKIM zihambisana kahle yini.

Irekhodi eliyisisekelo le-DMARC lingase libukeke njenge-TXT ku-_dmarc.yourcompany.com ngenani elifana nelithi v=DMARC1; p=none; rua=mailto:reports@yourcompany.comNgemva kokuhlaziya imibiko nokulungisa noma yiziphi izikhala, ungaphakamisa inqubomgomo ukuze ukuhlala yedwa (ukuthumela iposi esolisayo kugaxekile) futhi ekugcineni wenqaba uma ufuna isivikelo esiphezulu ekuziphatheni kabi.

Amaklayenti amaningi e-imeyili, ikakhulukazi abahlinzeki abakhulu, manje alindele ukuthi ama-domain athumela amavolumu amaningi abe ne-DMARC endaweni yawo.. Kuhlanganiswe ne-SPF kanye ne-DKIM elungiselelwe kahle, inqubomgomo enamandla ye-DMARC ingenye yezimpawu ezicacile zokuthi isizinda sakho siphethwe kahle futhi asisona umthombo wokuhlukunyezwa.

Ukuvimbela ugaxekile okusekelwe ku-DNS kanye nedumela lomthumeli

Izihlungi zesimanje zogaxekile zithembele kakhulu kudatha ye-DNS ukuze zahlulele ukuthi kufanele yini zithembe i-imeyiliBabheka i-MX, i-SPF, i-DKIM, i-DMARC, i-PTR, ngisho nokuvumelana kwamarekhodi e-A kanye ne-NS lapho benquma ukuthi benzeni ngomlayezo ngamunye.

Uma i-SPF, i-DKIM, ne-DMARC zonke zihambisana kahle, isizinda sakho sakha idumela elihleNgokuhamba kwesikhathi, ama-ISP ayabona ukuthi i-imeyili eqinisekisiwe evela kuwe iholela emazingeni aphansi ezikhalazo kanye nokuzibandakanya okuqhubekayo. Ngakolunye uhlangothi, amarekhodi e-DNS angekho noma aphukile ayisibonakaliso esibomvu: i-imeyili ingase isafika, kodwa kungenzeka kakhulu ukuthi ithunyelwe kugaxekile noma ivinjwe ngokuphelele.

I-DNS iyasiza futhi ekuvikeleni abamukeli bakho ekugebengwini bokweba imininingwane ebucayi kanye nokukhwabanisaAbahlaseli bathanda ukuzenza imikhiqizo eyaziwayo noma abasebenzi bangaphakathi ngokuqamba amakheli avela ku-SPF. Nge-SPF, i-DKIM, ne-DMARC, wenza lokho kube nzima kakhulu. Abamukeli bangalahla ngokuphephile noma bahlukanise imiyalezo ezenza sengathi ivela kusizinda sakho kodwa yehluleke izinqubomgomo ezishicilelwe.

Ukulethwa akukhona nje kuphela nge-DNS, vele. Ikhwalithi yokuqukethwe, ivolumu yokuthumela, inhlanzeko yohlu, amazinga ezikhalazo, kanye nokuzibandakanya konke kubalulekile. Kodwa ngaphandle kwesisekelo esiqinile se-DNS, ngisho nokuqukethwe okuphelele akunakunqoba ukusola okubangelwa yi-imeyili engaqinisekisiwe noma engalungiselelwe kahle.

Ukuxazulula izinkinga ze-imeyili ezivamile ezibangelwa yi-DNS

Uma i-imeyili yehluleka, i-DNS ivame ukuba yimbangelaIzimpawu ziyahlukahluka—kusukela ekuqhumeni okuqinile ngamakhodi ezinombolo ze-SMTP kuya emilayezweni enyamalala buthule ibe ugaxekile—kodwa ezimweni eziningi imbangela itholakala kurekhodi le-DNS elingekho noma elingavumelekile.

Ukuthumela i-imeyili noma ukungayitholi ngokuqondile

Ukuqhuma okuqinile ngamakhodi afana no-550, 554, noma amaphutha okukhuluma ngezizinda ezingavumelekile ngokuvamile kukhomba izinkinga zokucushwa kwe-DNS. Abantu ababili abavame ukwephula umthetho balahlekelwa amarekhodi e-MX kanye nezinqubomgomo ze-SPF ezingafaki i-IP noma isevisi yangempela yokuthumela.

Uma iphutha likhononda ngokuthi “akukho rekhodi le-A noma le-MX” noma “isizinda se-mailer esingavumelekile,” buyekeza indawo yakhoQinisekisa ukuthi isizinda esisekhelini elithi From sinerekhodi lika-A elisebenzayo, okungenani irekhodi elilodwa le-MX elikhomba igama lomethuleli elingaxazululeka, nokuthi lawo magama omethuleli ngokwawo anamarekhodi asebenzayo e-A noma e-AAAA. Noma yikuphi ukuthayipha amagama omethuleli kungaphula uchungechunge.

Ukwenqatshwa okubhekisela ekuhlulekeni kwe-DNS okuphambene noma ama-IP afakwe ohlwini oluvinjelwe kuvame ukubuyela emuva kumarekhodi e-PTRHlola ukuthi i-IP yakho yokuthumela ine-PTR evumelana negama lomethuleli olilawulayo, nokuthi leli gama lomethuleli linerekhodi elifanayo le-A. Uma kungenjalo, vula ithikithi nge-imeyili yakho noma umhlinzeki we-hosting bese ubacela ukuthi balungise i-DNS ephambene.

Imiyalezo ihlala ifika kumafolda ogaxekile

Uma imiyalezo yakho iletha kodwa ingena njalo kudoti, bheka kuqala isitaki sakho sokuqinisekisaSebenzisa amathuluzi aku-inthanethi ukuqinisekisa i-SPF, i-DKIM, kanye ne-DMARC yesizinda sakho. Noma yikuphi ukwehluleka noma izexwayiso kuyizinkomba zokuthi izinhlelo zokwamukela iposi azithembi ngokugcwele ithrafikhi yakho.

Hlola ukuthi isizinda esikukheli le-Visential From sihambisana ne-SPF yakho kanye ne-DKIM. Ku-SPF, isizinda somthumeli wemvilophu (i-Return-Path) kufanele sigunyazwe. Ku-DKIM, inani le-d= kusihloko se-DKIM kufanele libe yisizinda osiphethe futhi, ngokufanelekile, siqondanise noma sivumelanise nesizinda esivela ku-From. I-DMARC ibe isihlola lokho kuqondanisa lapho inquma ukuthi izowuthola kanjani umlayezo.

Ukuziphatha komsebenzisi nakho kudla ama-algorithms ogaxekileUma abamukeli abaningi besusa imiyalezo ngaphandle kokufunda, bengayivuli, noma bengayimaka njengogaxekile, idumela lakho lizoncipha kungakhathaliseki ukuthi i-DNS yakho ihlanzekile kangakanani. Ukuhlanganisa ukuqinisekiswa kwe-DNS okuqinile nemikhuba emihle yokuthumela kuyindlela ephumelelayo.

Amafomu ewebhu noma izinhlelo zokusebenza ezithumela iposi ezingafiki

Uma amafomu okuxhumana newebhusayithi noma izinhlelo zokusebenza zibonakala sengathi "zithumela" i-imeyili kodwa kungafiki lutho, i-SPF ivame ukungalungiselelwa kahleI-IP yeseva yewebhu noma i-mailer yeplatifomu kungenzeka ingafakwanga kurekhodi lakho le-SPF, ngakho abamukeli baphatha imiyalezo njengesolisayo noma bayayenqaba ngokuphelele.

Uma isayithi lakho lithumela iposi kusetshenziswa isizinda somhlinzeki wakho webhokisi leposi oyinhloko, qinisekisa ukuthi iseva yokuthumela yangempela (isibonelo, i-web host yakho noma i-ESP yokuthengiselana) ivela kunqubomgomo ye-SPF. Kwezinye izimo kungcono ukusebenzisa isizinda esingaphansi esizinikele kanye ne-ESP elungiselelwe kunokuthembela kumsebenzi weposi ozenzakalelayo we-web host.

Ukubhekana nokubambezeleka kokusakazwa kwe-DNS

Noma nini lapho ushintsha amarekhodi e-MX, SPF, DKIM, noma e-DMARC, nikeza i-inthanethi isikhathi sokufinyelela ulwazi oludingekayo. I-DNS isebenza ekugcinweni kwesikhashana: abaxazululi bakhumbula izimpendulo ngobude be-TTL, okungaba imizuzu noma amahora. Phakathi nalesi sikhathi, abanye abathumeli babona ukucushwa okusha kanti abanye basasebenzisa okudala.

Uma uhlela ukufuduka okukhulu nge-imeyili, yehlisa ama-TTL ngosuku noma ezimbili kusengaphambili. Ukunciphisa i-TTL ibe yimizuzwana engama-300 kumarekhodi ayisihluthulelo kwenza izinguquko zesikhathi esizayo zisakazeke ngokushesha. Ngemva kokuthi i-cutover isizinzile, ungaphakamisa ama-TTL futhi ukuze uthole ukusebenza kanye nemibuzo embalwa.

Ukuhlola kusuka kumanethiwekhi amaningi nokusebenzisa amathuluzi okubheka i-DNS angaphandle kusiza ukuqinisekisa ukuthi ukusakazwa sekuqediwe ngempumelelo yiniUngathembeli kuphela kusisombululo sakho sendawo, esingase sigcinwe ngobudlova noma silungiselelwe ngezindlela ezingavamile.

Uma sihlanganisa konke, i-DNS ye-imeyili ayisiyonto emayelana nomlingo kodwa imayelana namarekhodi ahlelwe ngokucophelelaUma i-MX, i-SPF, i-DKIM, i-DMARC, i-PTR, kanye nokufakwayo okusekelayo kunembile futhi kuvumelana, isizinda sakho siba umthumeli othembekile emehlweni abahlinzeki beposi. Lokho kuthembana, okuhlanganiswe nohlu oluhlanzekile nokuqukethwe okucatshangelwe kahle, yikho okugcina imiyalezo yakho ebhokisini lokungenayo kanye nomkhiqizo wakho ungafakwanga kumafolda ogaxekile.