Do not send email if SPF record is not setup correctly

This commit is contained in:
Girish Ramakrishnan
2015-10-28 14:44:37 -07:00
parent 846e5deb36
commit 7caced2fe8
2 changed files with 24 additions and 7 deletions

View File

@@ -321,8 +321,8 @@ function addDnsRecords(callback) {
{ subdomain: '', type: 'A', value: sysinfo.getIp() },
// webadmin domain
{ subdomain: 'my', type: 'A', value: sysinfo.getIp() },
// softfail all mails not from our IP. Note that this uses IP instead of 'a' should we use a load balancer in the future
{ subdomain: '', type: 'TXT', value: '"v=spf1 ip4:' + sysinfo.getIp() + ' ~all"' },
// softfail all mails not from our domain
{ subdomain: '', type: 'TXT', value: '"v=spf1 a:' + config.fqdn() + ' ~all"' },
// t=s limits the domainkey to this domain and not it's subdomains
{ subdomain: DKIM_SELECTOR + '._domainkey', type: 'TXT', value: '"v=DKIM1; t=s; p=' + publicKey + '"' },
// DMARC requires special setup if report email id is in different domain