diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-05-05 14:54:56 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-05-05 14:54:56 +0200 |
| commit | 04e78cae06cc6f98f983da610cb95131d400fe46 (patch) | |
| tree | 2606737bd9449272946c7e7efc362c241e2c5c2e | |
| parent | 99df2c322d12667eadae2103d8ff205148e51de4 (diff) | |
| download | nixos-04e78cae06cc6f98f983da610cb95131d400fe46.tar nixos-04e78cae06cc6f98f983da610cb95131d400fe46.tar.gz nixos-04e78cae06cc6f98f983da610cb95131d400fe46.tar.bz2 nixos-04e78cae06cc6f98f983da610cb95131d400fe46.tar.xz nixos-04e78cae06cc6f98f983da610cb95131d400fe46.zip | |
surtr: dmarc
| -rw-r--r-- | hosts/surtr/dns/zones/email.bouncy.soa | 3 | ||||
| -rw-r--r-- | hosts/surtr/dns/zones/li.yggdrasil.soa | 6 |
2 files changed, 7 insertions, 2 deletions
diff --git a/hosts/surtr/dns/zones/email.bouncy.soa b/hosts/surtr/dns/zones/email.bouncy.soa index f894647d..96ae4013 100644 --- a/hosts/surtr/dns/zones/email.bouncy.soa +++ b/hosts/surtr/dns/zones/email.bouncy.soa | |||
| @@ -1,7 +1,7 @@ | |||
| 1 | $ORIGIN bouncy.email. | 1 | $ORIGIN bouncy.email. |
| 2 | $TTL 3600 | 2 | $TTL 3600 |
| 3 | @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. ( | 3 | @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. ( |
| 4 | 2022050504 ; serial | 4 | 2022050505 ; serial |
| 5 | 10800 ; refresh | 5 | 10800 ; refresh |
| 6 | 3600 ; retry | 6 | 3600 ; retry |
| 7 | 604800 ; expire | 7 | 604800 ; expire |
| @@ -21,6 +21,7 @@ $TTL 3600 | |||
| 21 | @ IN TXT "v=spf1 a:mailout.bouncy.email -all" | 21 | @ IN TXT "v=spf1 a:mailout.bouncy.email -all" |
| 22 | 22 | ||
| 23 | surtr._domainkey IN CNAME surtr._domainkey.yggdrasil.li. | 23 | surtr._domainkey IN CNAME surtr._domainkey.yggdrasil.li. |
| 24 | _dmarc IN TXT "v=DMARC1;p=reject;sp=reject;pct=100;adkim=s;aspf=s;rua=mailto:postmaster@yggdrasil.li;ruf=mailto:postmaster@yggdrasil.li" | ||
| 24 | 25 | ||
| 25 | _acme-challenge IN NS ns.yggdrasil.li. | 26 | _acme-challenge IN NS ns.yggdrasil.li. |
| 26 | 27 | ||
diff --git a/hosts/surtr/dns/zones/li.yggdrasil.soa b/hosts/surtr/dns/zones/li.yggdrasil.soa index 1e73b04f..1f06d5b0 100644 --- a/hosts/surtr/dns/zones/li.yggdrasil.soa +++ b/hosts/surtr/dns/zones/li.yggdrasil.soa | |||
| @@ -1,7 +1,7 @@ | |||
| 1 | $ORIGIN yggdrasil.li. | 1 | $ORIGIN yggdrasil.li. |
| 2 | $TTL 3600 | 2 | $TTL 3600 |
| 3 | @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. ( | 3 | @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. ( |
| 4 | 2022050502 ; serial | 4 | 2022050503 ; serial |
| 5 | 10800 ; refresh | 5 | 10800 ; refresh |
| 6 | 3600 ; retry | 6 | 3600 ; retry |
| 7 | 604800 ; expire | 7 | 604800 ; expire |
| @@ -23,6 +23,9 @@ ns IN AAAA 2a03:4000:52:ada:: | |||
| 23 | @ IN MX 0 ymir.yggdrasil.li. | 23 | @ IN MX 0 ymir.yggdrasil.li. |
| 24 | @ IN TXT "v=spf1 a:mailout.yggdrasil.li -all" | 24 | @ IN TXT "v=spf1 a:mailout.yggdrasil.li -all" |
| 25 | 25 | ||
| 26 | bouncy.email._report._dmarc IN TXT "v=DMARC1" | ||
| 27 | surtr.yggdrasil.li._report._dmarc IN TXT "v=DMARC1" | ||
| 28 | |||
| 26 | * IN A 188.68.51.254 | 29 | * IN A 188.68.51.254 |
| 27 | * IN AAAA 2a03:4000:6:d004:: | 30 | * IN AAAA 2a03:4000:6:d004:: |
| 28 | * IN MX 0 ymir.yggdrasil.li. | 31 | * IN MX 0 ymir.yggdrasil.li. |
| @@ -41,6 +44,7 @@ surtr IN MX 0 surtr.yggdrasil.li | |||
| 41 | surtr IN TXT "v=spf1 a:surtr.yggdrasil.li -all" | 44 | surtr IN TXT "v=spf1 a:surtr.yggdrasil.li -all" |
| 42 | 45 | ||
| 43 | surtr._domainkey.surtr IN CNAME surtr._domainkey.yggdrasil.li. | 46 | surtr._domainkey.surtr IN CNAME surtr._domainkey.yggdrasil.li. |
| 47 | _dmarc.surtr IN TXT "v=DMARC1;p=reject;sp=reject;pct=100;adkim=s;aspf=s;rua=mailto:postmaster@yggdrasil.li;ruf=mailto:postmaster@yggdrasil.li" | ||
| 44 | 48 | ||
| 45 | _acme-challenge.surtr IN NS ns.yggdrasil.li. | 49 | _acme-challenge.surtr IN NS ns.yggdrasil.li. |
| 46 | 50 | ||