Haumaru Īmēra

Haumaru īmēra.
Kua rite pai.

SPF, DKIM, DMARC kua tautuhia. Ārai-pāpāho, ārai-hī ika, tirotiro pūkino. TLS 1.3 i waenganui i ngā tūmau. Tātaritanga kua whakaritea. Kāore he whakarite e hiahiatia ana.

Ahunga DMARC: 14-rā aunoa mai i te aroturuki ki te whakakore, ia rohe i KPanel.

~96%

Pāpāho āraihia i te tapa

TLS 1.3

Whakamuna kawekawe

Auto

SPF / DKIM / DMARC

Kua whakaritea

Ture pāpāho

Ngā paparanga ārai

Ono paparanga i waenganui i ngā kaitūkino me tō pouaka whakauru.
ngā kaiwhiu me tō pouaka irirangi.

01

Tātaritanga ingoa IP

Ko ngā īmēra tukuna mai i ngā IP kei ngā rārangi ārai o Spamhaus, Barracuda, me Sender Policy Framework ka whakakore i te taumata hononga SMTP. Ko te nuinga o ngā pāpāho ka korehia i mua ake i tō rātou taenga ki tō mātou hanganga.

~88%

pāpāho āraihia i tēnei paparanga

02

Manatoko SPF + DKIM

Ko ia karere tukuna mai ka arotakehia ki te rekoata SPF o te rohe kaiwhakaaro me te waitohu DKIM. Ko ngā kore-taea ka whakaarahia ki te tūāhanga me te whakakore rānei i runga i te kaupeka DMARC o te rohe.

Auto

kāore he whakarite e hiahiatia ana

03

Kaute ihirangi ārai-pāpāho

Ko ngā ture Rspamd kua whakaritea e kaute ana i ia karere mō te ihirangi, ngā tauira uepū, me ngā whanonga tukutuku. Ka hono ki te ingoa IP mō tētahi kaute pāpāho huinga. Ka taea te tautuhi papa i ia pouaka meera.

Kua whakaritea

ngā ture tātaritanga ā-rohe

04

Ngā tikanga ārai-hī ika

Tātaritanga hononga, kitenga typosquatting, me te kitenga homoglyph mō ngā rohe kaiwhakaaro. Ka tohua ngā karere e ahua ana ki ngā waitohu rongonui, ki ngā rohe ōrite rānei.

AI-assisted

kitenga hī ika

05

Tirotiro pūkino + āpitihanga

Ka tirotirohia ngā āpitihanga katoa me ClamAV + AV tauhokohoko i mua i te tukutanga. Ka huakina ngā kōnae purua, ka tirotirohia tōkeke. Ka tohua aunoa ngā Macro i ngā kōnae Office.

Recursive

tirotiro kōnae purua

06

Waitohu putanga + pūrongo DMARC

Ko ia karere e tukuna ana e koe ka waitohungia DKIM ki tō kī rohe. Ka huihuia ngā pūrongo DMARC, ka whakaaturia i KPanel. 14-rā ahunga DMARC aunoa mai i p=none ki p=reject.

14-rā

ahunga DMARC aunoa

Ngā paepae katoa kua whakauru i ia mahere

Kaore he "whakalilike toiora ahuahanga" tīheke. Ngā kaiwhiwhiwhiwhi mahere Solo ka whiwhi i te tiaki ōrite me Enterprise. Ko te reiti te rereke tūturu e tata ana ki te 0.1%. Whakahaere arotakeake i te ūmeke-ā-paetukutuku, whakakaha ngā rereke tūturu i te pikitia kotahi.

Whakamārama DMARC

He aha tā DMARC e mahi ana.
Ko tā rātou e mahinga ai.

SPF

Sender Policy Framework

He aha tēnei

He rekoata DNS e whakatupuranga ana i ngā pūkapa irirangi e tika ana te tukunga irirangi mai i tō rohe.

Whakataurite

He whārangi kaipānga. Ka tiro ngā pūkapa irirangi i te rarangi i mua i te tukutu.

Pānga

Ka aukati i ngā kaiwhiu i te tukunga irirangi ōu mai i ngā pūkapa matapōkeka.

DKIM

DomainKeys Identified Mail

He aha tēnei

He tohu whakairo-nui kua tāpiri ki ia karere tukunga, ka taea te whakamatau mā DNS.

Whakataurite

He tohu pīhikoi. Ka tiro ngā pūkapa whakamarama i te tohu kāore i pakaru.

Pānga

Ka whakamatau i te karere kāore i whakarereke i te tūturu whakawhiti me te putake mai i a koe.

DMARC

Domain-based Message Authentication

He aha tēnei

E kōrero ana ki ngā pūkapa whakamarama me te mahi mehemea ka rahua ngā tiro SPF, DKIM rānei (whakakupu, tukutu, whakatonutanga rānei).

Whakataurite

"Mehemea ka pakaru te tohu, whakarua te reta kure."

Pānga

Ka aukati i ngā kaiwhiu i te whakatupu i tō rohe i ā rātou pukai-irirangi.

Whakamārama DMARC

Tīkina ahumahi 14-rā mai i te aroturuki ki te tukutu

Ko te nuinga o ngā kaipupuri ka tautoko DMARC ki te \"none\" tonutanga ka karanga i hangaia. Ka tīkina atu te tukutuku ahumahi i roto i ngā wiki rua. Ka aukati i ngā kaiwhiu e tautoko, kaore e pakaru i te irirangi tūturu mai i ngā taputapu e toru-wāhanga.

Rā 0–7

p=none

Whiwhi pūrongo, kaua e mahi. Rā 1 ki te 7 kei konei.

Rā 8–13

p=quarantine

Ko ngā kore-taea e āwangawangahia ana ka haere ki te pāpāho. Rā 8 ki te 14.

Rā 14+

p=reject

Ka whakahokia ngā kore-taea. Rā 14+. Tiaki katoa.

Ngā Pātai Rongonui.

Ngā mea e pātai ana ngā kaihoko āhuru īmēra ki a mātou i ngā wā katoa.

Ka tautuhia aunoa a SPF/DKIM/DMARC?+
Āe. Ina tāpirihia he rohe i KPanel, ka whakaputahia e mātou te SPF, DKIM, me tētahi rekoata aroturuki DMARC timatanga aunoa. Kāore he atohanga DNS, kāore he tāruarua-tāpiri. Ka oma ai te ahunga DMARC 14-rā me kore koe e pā ana ki a ia.
He aha te tātaritanga kua whakaritea?+
Kua ako mātou i ngā ture pāpāho mō ngā tauira ā-NZ: ngā mahi tinihanga ā-rohe, whakarite pēke Kiwi, hī ika IRD, me te whakarite MBIE. Ka hapa ēnei i ngā pūrere pāpāho whānui; ka mau ā mātou.
Ka taea e au te whitelist / blacklist kaiwhakaaro?+
Āe, ia pouaka meera ia pouaka meera, ia rohe ia rohe mai i KPanel. Whitelist tētahi kaiwhakaaro pono mō ake ake, whakakore rānei i tētahi rohe tukutuku katoa. Ka whai hua ngā hurihanga i roto i ētahi meneti.
He aha ka tū ki tētahi karere tika ka tohua?+
Ka tau ki tō kōpaki pāpāho me te whakaahuatanga kaute e kitea ana i te tīmata reta. Ka taea e koe te tukuna anō, ka tāpiri i te kaiwhakaaro ki tō whitelist i tētahi pāwhiri kotahi. Kāore mātou e mukua ana ngā karere tohua.
He tikanga tō te whakamuna TLS ko tōku īmēra he mea tūmataiti?+
Ka whakamuna a TLS i ngā karere i te ara kawekawe (tūmau-ki-tūmau me te kiritaki-ki-tūmau). Ko tō meera ehara i te whakamuna pito-ki-pito ki te kore ngā taha e rua e whakamahi ana i ētahi mea pēnei i te S/MIME, PGP rānei. Mō te nuinga o ngā īmēra pakihi, ko TLS te taumata tika.
Ka whiwhi au i ngā pūrongo DMARC?+
Āe. Ko ngā pūrongo huinga mai i ia kaiwhakaaro nui (Google, Microsoft, Yahoo) ka tātarihia, ka whakaaturia i KPanel. Ka kitea e koe ngā IP e tuku ana mō te ingoa o tō rohe, me te mōhio ka pāhia rānei te SPF/DKIM.

Stop being spoofed.
Īmēra e mātua whakaaro ana ki te haumaru.

SPF, DKIM, DMARC, ārai-pāpāho, ārai-hī ika. Katoa kua tautuhia, katoa e aroturukitia ana, katoa mai i KPanel.