<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body dir="auto">Guten Morgen ... wenn der MX richtig aufgelöst wird, dann ist es meiner Meinung nach ausreichend "v=spf1 a mx -all" ... und bitte - statt ~ . Weil die ~ ... alle anderen auch bedeutet und nur zum konfigurieren verwendet werden sollte. Grüße<div><br></div><div align="left" dir="auto" style="font-size:100%;color:#000000"><div>-------- Ursprüngliche Nachricht --------</div><div>Von: Andreas Mock <andreas.mock@drumedar.de> </div><div>Datum: 07.06.23 04:51 (GMT+01:00) </div><div>An: Christoph Kukulies <kuku@kukulies.org>, postfix-users@de.postfix.org </div><div>Betreff: AW: SPF record in DNS eintragen </div><div><br></div></div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Servus Christoph,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">habe den Artikel schnell überflogen.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">a) Mit relayhost ist der DNS-Eintrag Deines E-Mail-Servers gemeint.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">In Deinem Fall gibt die aktuelle Anfrage an Deine Domäne</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">$ host kukulies.org</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">kukulies.org has address 116.203.115.43</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">kukulies.org mail is handled by 10 mail.kukulies.org.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"># Der DNS-Eintrag für mail.kukulies.org ist</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">$ host mail.kukulies.org</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">mail.kukulies.org has address 116.203.115.43</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Damit ist die E-Mail-Domäne kukulies.org und der Relayhost</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">ist mail.kukulies.org.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">D.h. für die Zustellung von E-Mails an
<a href="mailto:blabla@kukulies.org">blabla@kukulies.org</a> ist aufgrund</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">des MX-Eintrages der Server mail.kukulies.org verantwortlich.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">b) Bei Hetzner gibt es die DNS-Konsole, in der Du einfach einen</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">TXT-Eintrag für die E-Mail-Domain, die Du beim Versenden der Mails</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">verwendest, also kukulies.org, machen kannst.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">kukulies.org TXT v=spf1 mx ip4:116.203.115.43 ~all</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">wobei "v=spf1 mx ip4:116.203.115.43 ~all" die Payload</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">des TXT-Records ist (ohne Anführungszeichen)</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Eintrag kannst Du prüfen mit:</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><a href="https://www.spf-record.de/">https://www.spf-record.de/</a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">WICHTIG: Bei all den Themen rund um E-Mail muss man</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">immer mental unterscheiden zwischen der E-Mail-Domäne</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">blabla@maildomain und den DNS-Einträgen zu den Mail-Servern,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">die diese Mail transportieren oder annehmen. Deren DNS-Namen</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">können komplett anders sein (sonst gäbe es keine Mail-Provider).</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Leider unterscheiden die Minibeispiele diese Rollen wenig.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hinzukommt die Unterscheidung zwischen der Header-From-Adresse</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">und der Envelope- aka MAIL FROM-Adresse.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Gruß</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Andreas</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> </span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Von:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> postfix-users <postfix-users-bounces+andreas.mock=drumedar.de@de.postfix.org>
<b>Im Auftrag von </b>Christoph Kukulies<br>
<b>Gesendet:</b> Dienstag, 6. Juni 2023 13:42<br>
<b>An:</b> postfix-users@de.postfix.org<br>
<b>Betreff:</b> SPF record in DNS eintragen </span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">Ich habe postfix (unter Ubuntu 18.04 LTS) gerade die SPF-feature hinzugefügt.</p>
</div>
<div>
<p class="MsoNormal">Habe mich da an dieser Anleitung orientiert:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"><a href="https://www.twilight-networks.com/wiki/Ubuntu_20.04_-_SPF,_DKIM_und_DMARC_in_Postfix_einrichten#SPF_in_Postfix_implementieren">https://www.twilight-networks.com/wiki/Ubuntu_20.04_-_SPF,_DKIM_und_DMARC_in_Postfix_einrichten#SPF_in_Postfix_implementieren</a></p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Postfix stürzt schon mal nicht ab. Eine Fehlermeldung gibt es auch nicht. Ich muß jetzt noch einen TXT Record in die MX-Sektion einbauen und muß erst mal herausfinden, wie ich das beim Provider (Hetzner) mache. Editiere ich am besten den
Zone file? </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Da steht:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto" class="MsoNormal">Erstellen Sie auf dem DNS-Server, der für Ihre Mail-Domain zuständig ist, jeweils einen DNS-TXT-Eintrag für den MX-Eintrag und einen für die HELO-Überprüfung nach folgendem Syntax:
</p>
<ul type="disc">
<li style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1" class="MsoNormal">
<code><span style="font-size:10.0pt">Hostname</span></code> für einen SPF-Eintrag ist kein Hostname erforderlich.</li><li style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1" class="MsoNormal">
<code><span style="font-size:10.0pt">Typ</span></code> hier geben Sie den Typ des DNS-Eintrags an. In unserem Fall muss es ein TXT-Eintrag sein</li><li style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1" class="MsoNormal">
<code><span style="font-size:10.0pt">Text</span></code> hier geben Sie die SPF-Information ein.</li></ul>
<p style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto" class="MsoNormal"><br>
SPF-Eintrag für die Domain <code><span style="font-size:10.0pt"><a href="http://example.com">example.com</a></span></code>
</p>
<table cellpadding="0" border="0" class="MsoNormalTable">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Hostname</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Typ</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Priorität</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Ziel</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Text</b> </p>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><a href="http://example.com">example.com</a> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">TXT </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">v=spf1 mx -all </p>
</td>
</tr>
</tbody>
</table>
<p style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto" class="MsoNormal"><br>
SPF-Eintrag für den HELO-Hostname <code><span style="font-size:10.0pt"><a href="http://relayhost.example.com">relayhost.example.com</a></span></code>
</p>
<table cellpadding="0" border="0" class="MsoNormalTable">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Hostname</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Typ</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Priorität</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Ziel</b> </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b>Text</b> </p>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><a href="http://relayhost.example.com">relayhost.example.com</a>
</p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">TXT </p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">v=spf1 a -all </p>
</td>
</tr>
</tbody>
</table>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">—————————————</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Wo finde ich relayhost? Weiß gar nicht, ob ich sowas habe.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Grüße</p>
</div>
<div>
<p class="MsoNormal">Christoph</p>
</div>
</div>
</div>
</div>
</body></html>