Ungakumisa Kanjani Ukuqinisekiswa Kwe-imeyili Nge-Microsoft Office (SPF, DKIM, DMARC)

Microsoft Office 365 Email Authentication - SPF, DKIM, DMARC

Sibona izinkinga eziningi zokulethwa ngamaklayenti kulezi zinsuku futhi izinkampani eziningi kakhulu azinazo izinto eziyisisekelo ukuqinisekiswa kwe-imeyili setha nge-imeyili yabo yehhovisi kanye nabahlinzeki bezinsizakalo zokumaketha nge-imeyili. Eyakamuva kakhulu bekuyinkampani ye-ecommerce esisebenza nayo ethumela imilayezo yokwesekwa nge-Microsoft Exchange Server.

Lokhu kubalulekile ngoba ama-imeyili osekelo lwekhasimende ekhasimende asebenzisa lokhu kushintshana kwemeyili abese edluliswa ngohlelo lwalo losekelo lwamathikithi. Ngakho-ke, kubalulekile ukuthi simise Ukuqinisekiswa Kwe-imeyili ukuze lawo ma-imeyili anganqatshwa singahlosile.

Lapho uqala ukumisa i-Microsoft Office esizindeni sakho, iMicrosoft inokuhlanganiswa okuhle namaseva amaningi Wokubhaliswa Kwesizinda lapho imisa ngokuzenzakalelayo yonke i-imeyili edingekayo (MX) amarekhodi kanye Nohlaka Lwenqubomgomo Yomthumeli (SPF) qopha i-imeyili yakho Yehhovisi. Irekhodi le-SPF eline-Microsoft elithumela i-imeyili yehhovisi lakho liyirekhodi lombhalo (I-TXT) kusibhalisi sesizinda sakho esibukeka kanje:

v=spf1 include:spf.protection.outlook.com -all

I-SPF ubuchwepheshe obudala, nokho, futhi ukuqinisekiswa kwe-imeyili sekuthuthuke ngokuqinisekiswa komlayezo osuselwe kusizindalwazi, ukubika kanye nokuhambisana (I-DMARC) ubuchwepheshe lapho mancane amathuba okuthi isizinda sakho sonanjwe umthumeli ogaxekile we-imeyili. I-DMARC inikeza indlela yokusetha ukuthi ufuna abahlinzeki besevisi ye-inthanethi (ISP) baqine kangakanani ukuze baqinisekise ulwazi lwakho lokuthumela futhi ikunikeze ukhiye womphakathi (RSA) ukuze uqinisekise isizinda sakho nomnikezeli wesevisi, kulokhu, i-Microsoft.

Izinyathelo zokusetha i-DKIM ku-Office 365

Ngenkathi ama-ISP amaningi ethanda Indawo Yokusebenzela yakwaGoogle ikunikeza amarekhodi we-TXT ama-2 ongawasetha, iMicrosoft ikwenza ngokuhlukile kancane. Bavame ukukunikeza amarekhodi angu-2 e-CNAME lapho noma yikuphi ukuqinisekiswa kudluliselwa eziphakelini zabo ukuze kubhekwe futhi kuqinisekiswe. Le ndlela isivamile kakhulu embonini... ikakhulukazi ngabahlinzeki besevisi ye-imeyili kanye nabahlinzeki besevisi be-DMARC.

  1. Shicilela amarekhodi amabili e-CNAME:

CNAME: selector1._domainkey 
VALUE: selector1-{your sending domain}._domainkey.{your office subdomain}.onmicrosoft.com
TTL: 3600

CNAME: selector2._domainkey
VALUE: selector2-{your sending domain}._domainkey.{your office subdomain}.onmicrosoft.com
TTL: 3600

Kunjalo, udinga ukubuyekeza isizinda sakho sokuthumela kanye nesizinda sehhovisi lakho ngokulandelana esibonelweni esingenhla.

  1. Dala Okhiye bakho be-DKIM kweyakho Isivikeli seMicrosoft 365, iphaneli yokuphatha ye-Microsoft ukuze amakhasimende abo alawule ukuphepha kwawo, izinqubomgomo, nezimvume. Uzothola lokhu ku Izinqubomgomo nemithetho > Izinqubomgomo ezisongelayo > Izinqubomgomo zokulwa nogaxekile.

dkim keys microsoft 365 defender

  1. Uma usudale okhiye bakho be-DKIM, uzodinga ukunika amandla Sayina imilayezo yalesi sizinda ngamasiginesha e-DKIM. Inothi elilodwa kulokhu ukuthi kungathatha amahora noma izinsuku ukuthi lokhu kuqinisekiswe njengoba amarekhodi esizinda agcinwe kunqolobane.
  2. Uma usubuyekeziwe, ungakwazi sebenzisa izivivinyo zakho ze-DKIM ukuqinisekisa ukuthi zisebenza ngendlela efanele.

Kuthiwani Nge-imeyili Yokugunyazwa Kwe-adn Yokubika Ukudiliva?

Nge-DKIM, ngokuvamile umisa ikheli le-imeyili lokuthwebula ukuze ube nanoma yimiphi imibiko ethunyelwe kuwe mayelana nokulethwa. Esinye isici esihle sendlela yokusebenza ye-Microsoft lapha ukuthi barekhoda futhi bahlanganise yonke imibiko yakho yokulethwa - ngakho asikho isidingo sokuthi lelo kheli le-imeyili liqashwe!

Imibiko ye-imeyili yokuphepha ye-microsoft 365 ye-spoofing