Dkım and spf check

[Ali-istif]

hi,
We are using pmg.
we would like to ıf cusomer do not have dkım ,dmarc or spf record,the pmg do not accept the email from them.
Does Pmg will check spf,dkım and dmarc record ?
Please check and advice us.

 

[Stoiko Ivanov]

we would like to ıf cusomer do not have dkım ,dmarc or spf record,the pmg do not accept the email from them.

While you can do that - keep in mind that all of those mechanisms do not consider it acceptable to reject mails because one of them is missing
(the story is different if they fail a certain check - but even then you will usually get quite a few false positives)

If you configure it like that I would expect that many relevant mails from the public internet will not be able to be delivered to your addresses.

Does Pmg will check spf,dkım and dmarc record ?

PMG can reject mails that come from a IP that is not covered by the SPF (if the domain has a SPF record that says that other IPs should be rejected)
- you can enable this in GUI->Configuration->Mail Proxy->Options

for dkim, dmarc fails (and also if you really want to reject mails that just don't have a SPF record) you can check which SpamAssassin rules trigger on those - and increase their scores - then add a rule to block messages with such a high spam score in your Rule system

https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_spamdetector

I hope this helps!

 

[Ali-istif]

hi,
okay.thanks for reply.