Ask HN: How to send dkim/spf compliant email from Debian?

5 pointsby johnnyApplePRNGvor 5 Jahren6 comments

I don't need to create a full blown email implementation.

I don't need to receive emails from anybody.

I just want to be able to to send emails from [email protected] for password resets, email address verifications, things like that.

And I would like to at least make an attempt to have the emails I send pass through a basic spam filter. So I assume at the very least I need to setup DKIM and SPF records.

Is it as simple as following https://wiki.debian.org/Postfix and https://wiki.debian.org/opendkim ?

(That is the route I am taking right now, will report back here what I find out in a few hours!)

6 comments

pbourkevor 5 Jahren

I’m a big fan of hosting stuff myself, but I will nope out of email at the first chance I get. I would just use AWS Simple Email Service, Mailgun, Sendgrid, etc.

monkeydatavor 5 Jahren

amavis

All email is perl.

johnnyApplePRNGvor 5 Jahren

Andddddddd I want to rip my fucking hair out by the root!

Going to try again tomorrow :S

high_bytevor 5 Jahren

you would need to setup dns records either way.

I used dkimpy, pretty simple: https://russell.ballestrini.net/quickstart-to-dkim-sign-emai...

hardwaresoftonvor 5 Jahren

Use https://maddy.email, it's fantastic and will spit out DKIM for you. The rest (DMARC, SPF) you'll have to set up yourself but it's mostly setting up DNS records.

Is there a reason why you're not choosing an email provider? there are very cheap ones out there. What you're trying to do is normally called "transactional" email normally and there are a lot of providers who specialize in that.

toast0vor 5 Jahren

SPF is relatively easy (as long as you've got a static IP). DKIM isn't terrible, but it is frustrating. IIRC, you need to setup a milter in postfix and give that a key that you also need to put into DNS. After that, test it a bunch.

Then be sure to set a DMARC DNS record that advises recipients to require DKIM. Downside is your mail will bounce when you mess up DKIM, upside is you'll get somewhat clear feedback.