How to implement SPF, DKIM and DMARC records in NSD

NSD
1

Dear All,

We are hosting an email server on our site. To improve upon its security and it’s reputation, I want to implement SPF, DKIM and DMARC.

Can anybody please help me as to how I can do it with NSD?

Thank you all.

Mukul

2

Hi Mukul,

We are hosting an email server on our site. To improve upon its security
and it's reputation, I want to implement SPF, DKIM and DMARC.

Can anybody please help me as to how I can do it with NSD?

NSD is just an authoritative DNS server. You can add SPF and DKIM
records to your domain, and NSD (or any other authoritative DNS server)
will happily serve them.

However, if you need to understand how SPF, DKIM and DMARC work, then
you'll need to do some reading, and perhaps ask your questions on a
different forum or mailing list, because this list is for discussion
about NSD.

Here's an article I found with a google search:

https://woodpecker.co/blog/spf-dkim/

Regards,
Anand

3

I want to know, where can I read about how to add SPF, DKIM and DMARC records in NSD.
Can somebody point me to a tutorial/writeup?

Mukul

4

After googling a lot found this for anybody like me:

https://www.entrust.com/knowledgebase/ssl/how-to-create-a-txt-record-on-nsd-for-entrust-email-validation-method

Mukul

5

Hi Mukul,

I want to know, where can I read about how to add SPF, DKIM and DMARC
records in NSD.
Can somebody point me to a tutorial/writeup?

I think you're missing some basic DNS knowledge here. DNS records are
added to a plain text file called a zone file. You can read more about
zone files here:

https://en.wikipedia.org/wiki/Zone_file

You then configure your DNS server (NSD, Knot DNS, BIND, etc) to load
this zone file, and serve up DNS responses to queries.

Your confusion stems from the fact that tinydns does NOT use a regular
zone file. It is unusual in that respect. So before moving away from
tinydns to a regular DNS server that just uses zone files, you'll need
to understand the zone file format, and also convert your existing data
data from the CDB format used by tinydns to a regular zone file. You can
either do that by hand (if your zone is small), or by launching
"axfrdns" and performing a zone transfer out of it.

Regards,
Anand