Hi Peter,
It's actually not quite complicated. DMARC comprises SPF and DKIM.
It's more of publish the two records and configure Exim to sign outgoing
mail. It's pretty easy if you have complete control of your DNS servers.
So here are three links that will demystify the whole thing for you:
https://blog.returnpath.com/build-your-dmarc-record-in-15-minutes-v2/
https://port25.com/dkim-wizard/
https://www.itworld.com/article/2773545/enterprise-
software/how-to-deploy-dkim-email-authentication-in-4-steps.html
You can then use
http://www.appmaildev.com/ to test your setup.
Head to
http://exim4u.org/, grab the tarball and look at the configuration
files. They have pretty good explanation of how to implement DKIM.
Come back with questions in a day or two.
HTH
On 9 April 2018 at 16:24, Peter Hutchison via Exim-users <
exim-users@???> wrote:
> Has anyone implemented any of the following on their mail systems?
> StartTLS, DMarc and DKim.
>
> I would just like to any tips, gotchas, downsides or other useful
> information I should know?
>
>
>
> Peter Hutchison MCP
> Senior Network Systems Specialist
> * 01484 473716
> Networks Team
> University of Huddersfield | Queensgate | Huddersfield | HD1 3DH
>
>
> University of Huddersfield inspiring tomorrow's professionals.
> [http://marketing.hud.ac.uk/_HOSTED/EmailSig2014/EmailSigFooter.jpg]
>
> This transmission is confidential and may be legally privileged. If you
> receive it in error, please notify us immediately by e-mail and remove it
> from your system. If the content of this e-mail does not relate to the
> business of the University of Huddersfield, then we do not endorse it and
> will accept no liability.
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."
