reza/devops-infrastructure
Watch
1
0
Fork
You've already forked devops-infrastructure
 0
Code Issues 22 Pull requests Projects Releases Packages Wiki Activity Actions

Deliverability & keamanan email lanjutan (SPF/DKIM/MTA-STS/TLS-RPT) #13

New issue
Open
opened 2026-10-11 06:57:53 +00:00 by reza · 0 comments
reza commented 2026-10-11 06:57:53 +00:00
Owner
Copy link

Kondisi sekarang: DMARC ada (p=quarantine); SPF/DKIM/MTA-STS/TLS-RPT belum terverifikasi; tanpa monitoring blocklist/laporan DMARC.

Usulan: pastikan SPF, DKIM (rotasi kunci), naikkan DMARC ke p=reject bertahap; tambah MTA-STS + TLS-RPT; pantau blocklist & laporan agregat DMARC; fail2ban untuk submission.

Selesai bila:

  • SPF/DKIM/DMARC tervalidasi
  • MTA-STS + TLS-RPT aktif
  • Monitoring blocklist
**Kondisi sekarang:** DMARC ada (`p=quarantine`); SPF/DKIM/MTA-STS/TLS-RPT belum terverifikasi; tanpa monitoring blocklist/laporan DMARC. **Usulan:** pastikan SPF, DKIM (rotasi kunci), naikkan DMARC ke `p=reject` bertahap; tambah MTA-STS + TLS-RPT; pantau blocklist & laporan agregat DMARC; fail2ban untuk submission. **Selesai bila:** - [ ] SPF/DKIM/DMARC tervalidasi - [ ] MTA-STS + TLS-RPT aktif - [ ] Monitoring blocklist
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
area/automation
IaC, CI/CD, provisioning

  
area/backup
Backup, retensi, restore, DR

  
area/governance
Dokumen, proses, review, runbook

  
area/observability
Metrik, log, alerting, uptime

  
area/reliability
HA, SPOF, healthcheck, resource limit

  
area/security
Hardening, secret, firewall, supply chain

  
priority/p0
Kritis — kerjakan segera

  
priority/p1
Penting — segera setelah p0

  
priority/p2
Nice to have / jangka panjang

No labels
area/automation
area/backup
area/governance
area/observability
area/reliability
area/security
priority/p0
priority/p1
priority/p2
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
reza/devops-infrastructure#13
No description provided.