Netgate SG-1000 microFirewall

Author Topic: Help to add a DMARC record  (Read 278 times)

0 Members and 1 Guest are viewing this topic.

Offline zefetorres

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Help to add a DMARC record
« on: December 12, 2017, 02:53:08 pm »
Help to add a DMARC record

I can not send emails, if I can receive.

mxtool box marks me this error: dmarc dominio.com DNS Record not found

How do I add a DMARC record in my pfsense?

Offline JKnott

  • Hero Member
  • *****
  • Posts: 1368
  • Karma: +60/-13
    • View Profile
Re: Help to add a DMARC record
« Reply #1 on: December 12, 2017, 03:16:24 pm »
I assume you mean your Internet connection is failing intermittently.  When I had that problem, I wrote a shell script that pinged my ISP's gateway address every minute and recorded the time of failures.
This page unintentionally left blank.

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 15731
  • Karma: +1467/-210
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Help to add a DMARC record
« Reply #2 on: December 12, 2017, 03:23:24 pm »
No DMARC is a setting for email domains..

https://en.wikipedia.org/wiki/DMARC
Domain-based Message Authentication, Reporting and Conformance (DMARC)

Are you running bind?  Unbound is not really meant to be an authoritative NS...

The NS for that domain are listed as
;; ANSWER SECTION:
dominio.com.            3446    IN      NS      ns1.accountsupport.com.
dominio.com.            3446    IN      NS      ns2.accountsupport.com.

You would setup the dmarc entries there.. that would have nothing to do with pfsense - unless your actually hosting ns1 and ns2 on pfsense?
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.4.3-RELEASE (work)
1x SG-3100 2.4.3-RELEASE (work)
1x SG-4860 2.4.3-RELEASE (home)

marjohh

  • Guest
Re: Help to add a DMARC record
« Reply #3 on: December 13, 2017, 03:29:52 am »
As jonPoz said, it gets set up on the authoritative ns. The only side note on that is that if you are running your own mail server behind pfSense and you want to use dkim, then you will more than likely need to add that to the pfSense DNS resolver, otherwise your mailserver will complain.

If you do want to add dkim, then just search for dkim on this site and you'll find I posted a thread about it.

Offline dhaselhorst

  • Newbie
  • *
  • Posts: 13
  • Karma: +2/-0
    • View Profile
Re: Help to add a DMARC record
« Reply #4 on: December 16, 2017, 07:57:52 am »
Agree with johnpoz and marjohn56. If you need helping setting up DMARC (and SPF/DKIM), a group and I put together a technical guide at the link below if you are interested. It also has an associated testing guide which walks you through the process of discovering your authoritative nameservers.

https://www.linuxincluded.com/implementing-spf-dkim-and-dmarc/