nixCraft 🐧DNS settings to avoid email spoofing and phishing for unused domain https://www.cyberciti.biz/security/dns-settings-to-avoid-email-spoofing-and-phishing-for-unused-domain/
seeteegee@nixCraft it's weird that this has to be opt out, not opt in. Maybe that part should be fixed?
8941dc91-867e-4412-afd5-4698d32477be:t_blink:@nixCraft
For all the PowerDNS users out there:
```
$ for zone in $(pdnsutil list-all-zones | grep -v -e ip6.arpa -e in-addr.arpa | sort); do
pdnsutil list-zone $zone | egrep -q "\sMX\s" || echo $zone is missing MX record
pdnsutil list-zone $zone | egrep -q -i "v=spf1" || echo $zone is missing SPF record
pdnsutil list-zone $zone | egrep -q -i "v=DMARC" || echo $zone is missing its DMARC policy
pdnsutil list-zone $zone | egrep -q -i "v=DKIM" || echo $zone does not hold a single DKIM record
done
```
For all the PowerDNS users out there:
```
$ for zone in $(pdnsutil list-all-zones | grep -v -e ip6.arpa -e in-addr.arpa | sort); do
pdnsutil list-zone $zone | egrep -q "\sMX\s" || echo $zone is missing MX record
pdnsutil list-zone $zone | egrep -q -i "v=spf1" || echo $zone is missing SPF record
pdnsutil list-zone $zone | egrep -q -i "v=DMARC" || echo $zone is missing its DMARC policy
pdnsutil list-zone $zone | egrep -q -i "v=DKIM" || echo $zone does not hold a single DKIM record
done
```
Aaron Longchamps@nixCraft shout out to Cloudflare who have this as a suggested action to take in their DNS dashboard if you're not using mail. It includes all the same settings, and is pretty much a one-click operation.
The Planet Repairman