Yuav Ua Li Cas Siv Koj Tus Email Kev lees paub tseeb yog teeb tsa kom raug (DKIM, DMARC, SPF)

DKIM Validator DMARC SPF

Yog tias koj xa email ntawm txhua hom ntim, nws yog qhov kev lag luam uas koj xav tias ua txhaum thiab yuav tsum ua pov thawj koj qhov tsis muaj txim. Peb ua haujlwm nrog ntau lub tuam txhab pab lawv nrog lawv cov email tsiv teb tsaws chaw, IP ua kom sov, thiab teeb meem xa tawm. Feem ntau cov tuam txhab tsis txawm paub tias lawv muaj teeb meem txhua.

Cov teeb meem tsis pom kev ntawm kev xa tawm

Muaj peb qhov teeb meem pom tsis tau nrog email xa tawm uas cov lag luam tsis paub txog:

  1. Tso Cai - Email chaw muab kev pabcuam (ESP) tswj qhov kev tso cai xaiv… tab sis tus muab kev pabcuam hauv internet (ISP) tswj lub rooj vag rau qhov chaw nyob email. Nws yog ib qho txaus ntshai heev. Koj tuaj yeem ua txhua yam raws li kev lag luam kom tau txais kev tso cai thiab email chaw nyob, thiab ISP tsis muaj lub tswv yim thiab tuaj yeem thaiv koj li cas.
  2. Cov Chaw Sau Npe - ESPs txhawb siab txoj kev xa khoom tau cov nqi uas yeej tsis muaj tseeb. Ib qho email uas tau xa ncaj qha mus rau lub nplaub tshev khib nyiab thiab tsis tau pom los ntawm koj tus neeg siv email yog xa tawm technically. Txhawm rau saib xyuas koj tus kheej tiag Thauj khoom hauv, koj yuav tsum siv cov npe ntawm cov noob thiab mus saib ntawm txhua ISP. Muaj cov kev pabcuam uas ua qhov no.
  3. Reputation - ISPs thiab cov kev pabcuam thib peb kuj tseem khaws cov qhab nia npe rau kev xa IP chaw nyob rau koj tus email. Muaj cov npe dub uas ISPs tuaj yeem siv los thaiv tag nrho koj cov email tag nrho, lossis koj yuav muaj lub koob npe tsis zoo uas yuav ua rau koj nkag mus rau cov ntawv tsis raug. Muaj ntau cov kev pabcuam uas koj tuaj yeem siv los saib xyuas koj tus IP lub koob npe nrov… tab sis kuv yuav xav tsis thoob vim tias ntau tus tsis muaj kev pom zoo rau txhua ISPs algorithms.

Email Authentication

Qhov kev coj ua zoo tshaj plaws rau kev txo qis cov teeb meem kev tso npe hauv inbox yog xyuas kom koj tau teeb tsa ntau cov ntaub ntawv DNS uas ISPs tuaj yeem siv los saib thiab xyuas kom meej tias cov emails uas koj xa tuaj yog xa los ntawm koj tiag tiag thiab tsis yog los ntawm ib tus neeg ua txuj ua koj lub tuam txhab. . Qhov no yog ua los ntawm ntau tus qauv:

  • Tus Xa Txoj Cai Sender (SPF) - tus qauv qub tshaj plaws nyob ib puag ncig, qhov no yog qhov chaw koj tso npe TXT cov ntaub ntawv ntawm koj lub npe sau npe (DNS) uas hais tias cov npe lossis IP chaw nyob twg uas koj xa email los ntawm koj lub tuam txhab. Piv txwv li, kuv xa email rau Martech Zone los ntawm Google Ntshoo thiab los ntawm CircuPress (Kuv tus kheej ESP tam sim no nyob rau hauv beta). Kuv muaj SMTP plugin ntawm kuv lub vev xaib kom xa los ntawm Google, txwv tsis pub kuv yuav muaj qhov chaw nyob IP nrog rau qhov no thiab.

v=spf1 include:circupressmail.com include:_spf.google.com ~all

  • sau-based Message Authentication, Tshaj Qhia thiab Ua Raws Li (DMARC) - tus qauv tshiab no muaj tus yuam sij encrypted hauv nws uas tuaj yeem siv tau ob qho tib si kuv tus sau thiab tus xa. Txhua tus yuam sij yog tsim los ntawm kuv tus neeg xa khoom, kom ntseeg tau tias emails xa los ntawm spammer tsis tuaj yeem raug spoofed. Yog tias koj siv Google Workspace, ntawm no yog Yuav teeb tsa DMARC li cas.
  • DomainKeys Identified Mail (DKIM) - Ua haujlwm nrog DMARC cov ntaub ntawv, cov ntaub ntawv no qhia rau ISPs yuav ua li cas kho kuv DMARC thiab SPF cov cai nrog rau qhov twg xa cov ntawv ceeb toom xa tuaj. Kuv xav kom ISPs tsis lees txais cov lus uas tsis dhau DKIM lossis SPF, thiab kuv xav kom lawv xa cov ntawv ceeb toom rau email chaw nyob ntawd.

v=DMARC1; p=reject; rua=mailto:dmarc@martech.zone; adkim=r; aspf=s;

  • Cov Ntsiab Lus Qhia Txog Hom Lus (BIMI) - qhov sib ntxiv tshiab tshaj plaws, BIMI muab ib txoj hauv kev rau ISPs thiab lawv cov ntawv thov email los tso saib lub logo ntawm hom khoom hauv email. Muaj ob qho tib si qhib tus qauv thiab ib qho encrypted txheem rau Gmail qhov twg koj kuj xav tau daim ntawv pov thawj encrypted. Daim ntawv pov thawj yog kim heev ces kuv tseem tsis tau ua li ntawd.

v=BIMI1; l=https://martech.zone/logo.svg;a=self;

CEEB TOOM: Yog tias koj xav tau kev pab ntawm kev teeb tsa ib qho ntawm koj tus email authentication, tsis txhob yig tiv tauj kuv lub tuam txhab Highbridge. Peb muaj ib pab neeg email kev lag luam thiab xa tawm cov kws tshaj lij uas tuaj yeem pab.

Yuav Ua Li Cas Siv Koj Tus Email Authentication

Tag nrho cov ntaub ntawv hauv lub hauv paus, cov ntaub ntawv xa mus, thiab cov ntaub ntawv pov thawj cuam tshuam nrog txhua tus email yog pom nyob rau hauv cov lus headers. Yog tias koj yog tus kws tshaj lij kev xa khoom, txhais cov no yooj yim zoo nkauj ... tab sis yog tias koj yog ib tug novice, lawv nyuaj heev. Nov yog cov lus header zoo li rau peb cov ntawv xov xwm, Kuv tau greyed tawm qee qhov kev teb email thiab cov ntaub ntawv tshaj tawm:

Message Header - DKIM thiab SPF

Yog tias koj nyeem dhau, koj tuaj yeem pom tias kuv txoj cai DKIM yog dab tsi, txawm tias DMARC hla (tsis yog) thiab SPF dhau… tab sis qhov ntawd yog qhov ua haujlwm ntau. Txawm li cas los xij, muaj ntau txoj haujlwm zoo dua, thiab qhov ntawd yog siv DKIMValidator. DKIMValidator muab koj tus email chaw nyob uas koj tuaj yeem ntxiv rau koj cov ntawv xov xwm lossis xa los ntawm koj lub chaw haujlwm email…

Ua ntej, nws validates kuv DMARC encryption thiab DKIM kos npe los saib seb nws dhau los (nws tsis).

DKIM Information:
DKIM Signature

Message contains this DKIM Signature:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=circupressmail.com;
	s=cpmail; t=1643110423;
	bh=PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=;
	h=Date:To:From:Reply-to:Subject:List-Unsubscribe;
	b=HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=


Signature Information:
v= Version:         1
a= Algorithm:       rsa-sha256
c= Method:          relaxed/relaxed
d= Domain:          circupressmail.com
s= Selector:        cpmail
q= Protocol:        
bh=                 PTOH6xOB3+wFZnnY1pLaJgtpK9n/IkEAtaO/Xc4ruZs=
h= Signed Headers:  Date:To:From:Reply-to:Subject:List-Unsubscribe
b= Data:            HKytLVgsIfXxSHVIVurLQ9taKgs6hAf/s4+H3AjqE/SJpo+tamzS9AQVv3YOq1Nt/
	 o1mMOkAJN4HTt8JXDxobe6rJCia9bU1o7ygGEBY+dIIzAyURLBLo5RzyM+hI/X1BGc
	 jeA93dVXA+clBjIuHAM9t9LGxSri7B5ka/vNG3n8=
Public Key DNS Lookup

Building DNS Query for cpmail._domainkey.circupressmail.com
Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+D53OskK3EM/9R9TrX0l67Us4wBiErHungTAEu7DEQCz7YlWSDA+zrMGumErsBac70ObfdsCaMspmSco82MZmoXEf9kPmlNiqw99Q6tknblJnY3mpUBxFkEX6l0O8/+1qZSM2d/VJ8nQvCDUNEs/hJEGyta/ps5655ElohkbiawIDAQAB
Validating Signature

result = fail
Details: body has been altered

Tom qab ntawd, nws saib kuv cov ntaub ntawv SPF kom pom tias nws dhau (nws ua):

SPF Information:
Using this information that I obtained from the headers

Helo Address = us1.circupressmail.com
From Address = info@martech.zone
From IP      = 74.207.235.122
SPF Record Lookup

Looking up TXT SPF record for martech.zone
Found the following namesevers for martech.zone: ns57.domaincontrol.com ns58.domaincontrol.com
Retrieved this SPF Record: zone updated 20210630 (TTL = 600)
using authoritative server (ns57.domaincontrol.com) directly for SPF Check
Result: pass (Mechanism 'include:circupressmail.com' matched)

Result code: pass
Local Explanation: martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)
spf_header = Received-SPF: pass (martech.zone: Sender is authorized to use 'info@martech.zone' in 'mfrom' identity (mechanism 'include:circupressmail.com' matched)) receiver=ip-172-31-60-105.ec2.internal; identity=mailfrom; envelope-from="info@martech.zone"; helo=us1.circupressmail.com; client-ip=74.207.235.122

Thiab thaum kawg, nws muab kev nkag siab rau kuv ntawm cov lus nws tus kheej thiab seb cov ntsiab lus puas tuaj yeem chij qee cov cuab yeej SPAM nrhiav kom pom, xyuas seb kuv puas nyob hauv blacklists, thiab qhia kuv seb puas tau pom zoo kom xa mus rau cov ntawv tais ceev tseg:

SpamAssassin Score: -4.787
Message is NOT marked as spam
Points breakdown: 
-5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                            high trust
                            [74.207.235.122 listed in list.dnswl.org]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                            identical to background
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                            Colors in HTML
 0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid

Nco ntsoov sim txhua qhov ESP lossis lwm qhov kev pabcuam xa xov uas koj lub tuam txhab xa email los ntawm kom ntseeg tau tias koj Email Authentication yog teeb tsa kom raug!

Kuaj Koj Tus Email Nrog DKIM Validator

Kev Tshaj Tawm: Kuv tab tom siv kuv txoj kev sib txuas rau Google Ntshoo hauv tsab xov xwm no.