EDITED: Proper Way to Configure a Domain which never sends emails

m3047 m3047 at m3047.net
Mon Aug 19 15:53:08 UTC 2019


Hi,

I would think declaring SPF as you say is the right course of action.

I would consider setting up DMARC as well. Whether it's your intention or 
not, if you set up DMARC (a way for people to report mail claiming to be 
from you) you've essentially created a honey pot; maybe somebody will be 
happy to take those DMARC-instigated reports from you.

On Mon, 19 Aug 2019, Ignacio García wrote:
> I have to set up dns records for a domain just for a web site, for which we 
> will NEVER send emails (though we might receive some from old customers), so 
> I would like to announce somehow that emails sent from this domain should 
> always be disregarded.

Outgoing mail should be disregarded.

> I was thinking of setting just A and AAAA records for 
> @ and www, NS records, MX records (for receiving)

Incoming mail should be received.

> and SPF with a record just 
> consisting of v=spf1 -all

>  , not declaring an A and MX records at all.

Contradicts earlier assertions.

--

Fred Morris


More information about the bind-users mailing list