<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="moz-cite-prefix">On 11/21/18 9:18 PM, Mathias HOUNGBO
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:e94ef9b1-49bb-b087-650f-4a085e2e94e8@houngbo.net">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>Hello Abeaku</p>
<p>normaly, with no spf record for a domain, you MTA <b>must</b>
accept mails from this domain !</p>
</blockquote>
<p><br>
</p>
<p>Tell that to the likes of gmail... and many others.<br>
</p>
<p>I see nothing wrong with our leading educational lights of
African Internet switching on more security. SPF is pretty easy.
DMARC could also happen. I'd also like to see DNSSEC enabled for
the afnog.org domain, then add DANE records too, for both Web and
Mail services. The site has a "Let's Encrypt" certificate and is
dual stacked already!</p>
<p>The website, mailserver and domain should be a prime example for
others to follow.<br>
</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:e94ef9b1-49bb-b087-650f-4a085e2e94e8@houngbo.net">
<pre class="moz-signature" cols="72">--
My NGO IGBANET - <a class="moz-txt-link-freetext" href="http://www.igbanet.bj" moz-do-not-send="true">http://www.igbanet.bj</a> | My blog - <a class="moz-txt-link-freetext" href="http://mathias.houngbo.net" moz-do-not-send="true">http://mathias.houngbo.net</a></pre>
<div class="moz-cite-prefix">Le 21/11/2018 à 18:43, Abeaku Badu
Arthur a écrit :<br>
</div>
<blockquote type="cite"
cite="mid:1266430410.472042.1542822208856.JavaMail.zimbra@knust.edu.gh">
<meta http-equiv="content-type" content="text/html;
charset=UTF-8">
<div style="font-family: Times New Roman; font-size: 12pt;
color:
 #000000">
<div><span style="color: #333333; font-family: monospace;

font-size: 14.16px; font-style: normal;

font-variant-ligatures: normal; font-variant-caps:
normal;
 font-weight: 400; letter-spacing: normal;
orphans: 2;
 text-align: start; text-indent: 0px;
text-transform: none;
 white-space: normal; widows: 2;
word-spacing: 0px;
 -webkit-text-stroke-width: 0px;
background-color: #ffffff;
 text-decoration-style:
initial; text-decoration-color:
 initial; display:
inline !important; float: none;" data-mce-style="color:
#333333; font-family: monospace;
 font-size: 14.16px;
font-style: normal;
 font-variant-ligatures: normal;
font-variant-caps: normal;
 font-weight: 400;
letter-spacing: normal; orphans: 2;
 text-align:
start; text-indent: 0px; text-transform: none;

white-space: normal; widows: 2; word-spacing: 0px;

-webkit-text-stroke-width: 0px; background-color:
#ffffff;
 text-decoration-style: initial;
text-decoration-color:
 initial; display: inline
!important; float: none;">Dear Colleagues,</span></div>
<div><span style="color: #333333; font-family: monospace;

font-size: 14.16px; font-style: normal;

font-variant-ligatures: normal; font-variant-caps:
normal;
 font-weight: 400; letter-spacing: normal;
orphans: 2;
 text-align: start; text-indent: 0px;
text-transform: none;
 white-space: normal; widows: 2;
word-spacing: 0px;
 -webkit-text-stroke-width: 0px;
background-color: #ffffff;
 text-decoration-style:
initial; text-decoration-color:
 initial; display:
inline !important; float: none;" data-mce-style="color:
#333333; font-family: monospace;
 font-size: 14.16px;
font-style: normal;
 font-variant-ligatures: normal;
font-variant-caps: normal;
 font-weight: 400;
letter-spacing: normal; orphans: 2;
 text-align:
start; text-indent: 0px; text-transform: none;

white-space: normal; widows: 2; word-spacing: 0px;

-webkit-text-stroke-width: 0px; background-color:
#ffffff;
 text-decoration-style: initial;
text-decoration-color:
 initial; display: inline
!important; float: none;"><br data-mce-bogus="1">
</span></div>
<div><span style="color: #333333; font-family: monospace;

font-size: 14.16px; font-style: normal;

font-variant-ligatures: normal; font-variant-caps:
normal;
 font-weight: 400; letter-spacing: normal;
orphans: 2;
 text-align: start; text-indent: 0px;
text-transform: none;
 white-space: normal; widows: 2;
word-spacing: 0px;
 -webkit-text-stroke-width: 0px;
background-color: #ffffff;
 text-decoration-style:
initial; text-decoration-color:
 initial; display:
inline !important; float: none;" data-mce-style="color:
#333333; font-family: monospace;
 font-size: 14.16px;
font-style: normal;
 font-variant-ligatures: normal;
font-variant-caps: normal;
 font-weight: 400;
letter-spacing: normal; orphans: 2;
 text-align:
start; text-indent: 0px; text-transform: none;

white-space: normal; widows: 2; word-spacing: 0px;

-webkit-text-stroke-width: 0px; background-color:
#ffffff;
 text-decoration-style: initial;
text-decoration-color:
 initial; display: inline
!important; float: none;">i recently enabled spf check on
incoming mails and <a class="moz-txt-link-abbreviated"
href="mailto:afnog@afnog.org" moz-do-not-send="true">afnog@afnog.org</a>
failed the test and so was rejected.</span></div>
<div><font face="monospace" color="#333333"><span
style="font-size: 14.16px;"
data-mce-style="font-size:
 14.16px;">I don't want
to disable the spf check as this is preventing spammers
from hitting our clients.</span></font></div>
<div><font face="monospace" color="#333333"><span
style="font-size: 14.16px;"
data-mce-style="font-size:
 14.16px;"> So can afnog
create an spf record for the MTA.</span></font></div>
<div><font face="monospace" color="#333333"><span
style="font-size: 14.16px;"
data-mce-style="font-size:
 14.16px;">Thank you.</span></font></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
afnog mailing list
<a class="moz-txt-link-freetext" href="https://www.afnog.org/mailman/listinfo/afnog" moz-do-not-send="true">https://www.afnog.org/mailman/listinfo/afnog</a></pre>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
afnog mailing list
<a class="moz-txt-link-freetext" href="https://www.afnog.org/mailman/listinfo/afnog">https://www.afnog.org/mailman/listinfo/afnog</a></pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Mark James ELKINS - Posix Systems - (South) Africa
<a class="moz-txt-link-abbreviated" href="mailto:mje@posix.co.za">mje@posix.co.za</a> Tel: +27.128070590 Cell: +27.826010496
For fast, reliable, low cost Internet in ZA: <a class="moz-txt-link-freetext" href="https://ftth.posix.co.za">https://ftth.posix.co.za</a>
</pre>
</body>
</html>