daily

Author: szepeviktor

mail/G-Suite.md

@@ -26,8 +26,14 @@ Custom business email.
     1024 bit
 1. Add generated TXT record `google._domainkey.`
 1. Add report-only DMARC record `_dmarc.`
-    - `"v=DMARC1; p=none; rua=mailto:[email protected];"`
-1. Use [Google Admin Toolbox](https://toolbox.googleapps.com/apps/checkmx/) Check MX service
-
-    `https://toolbox.googleapps.com/apps/checkmx/check?dkim_selector=google&domain=EXAMPLE.COM`
+    - no action: `"v=DMARC1; p=none; rua=mailto:[email protected];"`
+    - or quarantine only: `"v=DMARC1; p=quarantine; rua=mailto:[email protected];"`
+    - or reject: `"v=DMARC1; p=reject; rua=mailto:[email protected];"`
+1. Tools for checking
+    - [dmarcian SPF Surveyor](https://dmarcian.com/spf-survey/)
+    - [dmarcian DKIM Inspector](https://dmarcian.com/dkim-inspector/)
+    - [dmarcian DMARC Domain Checker](https://dmarcian.com/domain-checker/)
+    - https://redsift.com/tools/investigate
+    - [Google Admin Toolbox](https://toolbox.googleapps.com/apps/checkmx/) Check MX service is broken
+    - https://intodns.com/
 1. Optional [SMTP relay](https://admin.google.com/ac/apps/gmail/routing)

monitoring/apache-4xx-report.sh

@@ -33,6 +33,8 @@ declare -a IGNORE_PATTERNS=(
     '"GET /(ogShow\.aspx|show\.aspx|ogPipe\.aspx|oo\.aspx|1|email|img/logo-s\.gif) HTTP/(1\.0|1\.1|2\.0)" (301|403) [0-9]+ "[^"]+" "Amazon CloudFront"$'
     # Favicon in a subdirectory
     #'/favicon\.(ico|png) HTTP/(1\.0|1\.1|2\.0)" (403|404) [0-9]+ "'
+    # Image probes
+    #'"GET /(image|images|img|imgs)/\S+ HTTP/(1\.0|1\.1|2\.0)" (403|404|429)'
     # WordPress login page
     #'"GET /wp-login\.php HTTP/(1\.0|1\.1|2\.0)" 404'
     #'"(GET|POST) /wp-login\.php HTTP/(1\.0|1\.1|2\.0)" 403'